On Wed, 27 Jan 2021, Murray S. Kucherawy wrote:
I still don't understand why failure reports about messages that happen to be failure reports are in any way special.

Loop detection in RFC 5321 is a normative MUST because of the obvious
operational problems it creates.  Maybe I'm being thick, but right now I
don't see how this is different, apart from the fact that each message is
distinct; ...

Here's perhaps another way to look at it.

Imagine that I am a semi-competent mail server operator. I hear that DMARC is great stuff and I set up DMARC software on my server including sending and processing reports.

Unfortunately, my l33t coding skillz aren't quite up to it, and my failure reports are all unaligned. Also, I'm not very good at reading specs and my reports aren't in the right format either. (Not making this up, I have lots of failure reports that are not multipart/report.)

Oh, no! People are sending me failure reports about my failure reports! Make it stop!

Which of these should we do:

A) Everyone in the world who produces failure reports adds special cases to look for incoming failure reports, and heuristics to try and recognize failure reports in the wrong format, and when it finds one of them, it makes a note not to send a failure report about it.

B) Someone slaps me upside the head and I fix my SPF record so my reports are sent correctly.

This does not strike me as a hard problem.

Regards,
John Levine, [email protected], Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail. https://jl.ly

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to