Scott Kitterman writes:

 > How many solutions do you think operators will be willing to
 > implement?

As many as have an expected benefit/cost ratio greater than 1, of
course.

If you want numbers, my expectation is about 0.5 (the odds are
perceptibly better than even that *nothing* will be done), but I would
hardly be surprised by 2 or more, since it seems likely that mailing
lists and 3rd-party originated messages will require different
solutions, and I think the operators would like to implement given a
favorable benefit-cost ratio.

 > As I indicated in my utility assessment framework, I think we get a
 > maximum of one solution that requires cooperative implementations
 > in multiple parts of the originator/mediator/receiver trilogy.

Hm.  That's strange.  They've already implemented SMTP, SPF, DKIM, and
DMARC.  By my count, that puts them a minimum of three solutions past
what what you expect.

 > Given that, it had better be reasonably comprehensive.

I expect that levine-dkim-conditional + "register addresses found in
List-Post as candidates for delegation when an authenticated user
posts" is as cheap as it's going to get, and will cover more than half
of mailing lists.  I think that's pretty comprehensive for a start,
and thus something worth thinking about and looking for improvements,
rather than rejecting because it won't eliminate world poverty in 30
days.

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to