On 04/08/2014 10:01 PM, Dave Crocker wrote:
The problem is for more complicated scenarios it does not. Those more
complicated scenarios are legitimate and always have been. Mailing
lists are obviously a good example. Imposing DMARC into those
scenarios breaks DMARC.
Or breaks mailing lists, depending upon how you look at it.
A simple question is whether the benefit of DMARC is sufficient -- and
sufficiently clear -- to warrant such a dramatic reduction in the
flexibility of email use?
Presumably Yahoo! has made an assessment that this is true for messages
purporting to be from their domains. It may be that the reduction isn't
so drastic.
Two distinct broader questions present themselves:
* Is the same benefit sufficient to warrant a reduction - drastic or
otherwise - in the flexibility of email use from the perspective of
the entire email system.
* What about from the perspective of other individual Domain Owners?
This distinction is important because even if it's demonstrably not
good for the email system as a whole, if senders of most email see
it as beneficial for themselves, then they're likely to adopt anyway.
Note that DMARC restrictions apply to information that is typically
not visible to end users -- most modern MUAs do not display the From:
field address.
This is an important hole in the current understanding of DMARC's
approach, however I'd suggest that it will increasingly be the case that:
* this address,
* whether its use was authenticated by DMARC for the current message, and
* whether the domain - or even just address - is one that the receiver
has reason to trust slightly more than an unfamiliar domain
will affect presentation to end-users. There will, of course, be a large
number of users for whom this is not true, for a long time.
- Roland
--
Roland Turner | Director, Labs
TrustSphere Pte Ltd | 3 Phillip Street #13-03, Singapore 048693
Mobile: +65 96700022 | Skype: roland.turner
[email protected] | http://www.trustsphere.com/
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss
NOTE: Participating in this list means you agree to the DMARC Note Well terms
(http://www.dmarc.org/note_well.html)
