On May 9, 2015 1:09:09 PM EDT, "Stephen J. Turnbull" <[email protected]> wrote:
>Scott Kitterman writes:
>
> > How many solutions do you think operators will be willing to
> > implement?
>
>As many as have an expected benefit/cost ratio greater than 1, of
>course.
>
>If you want numbers, my expectation is about 0.5 (the odds are
>perceptibly better than even that *nothing* will be done), but I would
>hardly be surprised by 2 or more, since it seems likely that mailing
>lists and 3rd-party originated messages will require different
>solutions, and I think the operators would like to implement given a
>favorable benefit-cost ratio.

0.5 is about my estimate too.

> > As I indicated in my utility assessment framework, I think we get a
> > maximum of one solution that requires cooperative implementations
> > in multiple parts of the originator/mediator/receiver trilogy.
>
>Hm.  That's strange.  They've already implemented SMTP, SPF, DKIM, and
>DMARC.  By my count, that puts them a minimum of three solutions past
>what what you expect.

I meant how many solutions to the DMARC mediated sender problem. Yahoo, for 
example, already consider the impact of this and other breakage to be less than 
the benefit of p=reject.  I expect their willingness to invest engineering 
resources in further reducing a level of breakage they've already determined is 
acceptable will be limited.

> > Given that, it had better be reasonably comprehensive.
>
>I expect that levine-dkim-conditional + "register addresses found in
>List-Post as candidates for delegation when an authenticated user
>posts" is as cheap as it's going to get, and will cover more than half
>of mailing lists.  I think that's pretty comprehensive for a start,
>and thus something worth thinking about and looking for improvements,
>rather than rejecting because it won't eliminate world poverty in 30
>days.

I think that's at least one more than gets implemented. 

Scott K

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to