Re: [xwiki-devs] [xwiki-users] Lots of disabled Yahoo email addresses on the xwiki.org lists

2016-11-08 Thread Sergiu Dumitriu 
Or actually it's because you sent the mail directly to me, and I see a
copy that hasn't been through mailman. Everybody else got it in the Spam
folder, with the broken signature.

On 11/08/2016 09:50 AM, Sergiu Dumitriu wrote:
> It's not your fault, it's XWiki's Mailman's fault.
> 
> The signature verifies that your original email is valid.
> 
> But Mailman appends the following to the bottom of the mails:
> 
> devs mailing list
> devs@xwiki.org
> http://lists.xwiki.org/mailman/listinfo/devs
> 
> By adding this, the signature now fails. Since yahoo now says that mails
> without a valid signature aren't trusted, your email becomes untrusted.
> 
> I see now that your mail doesn't have this signature anymore (hurray
> XWiki infra!), and is now considered valid:
> 
> Authentication-Results: mx.google.com;
>dkim=pass header.i=@yahoo.fr;
>dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.fr
> 
> On 11/08/2016 03:40 AM, Pascal BASTIEN wrote:
>> Hello,
>> It is strange because my emails have a DKIM signature like here (piece of 
>> header from a mail I sent from my xwiki email to myself at another adress).
>> Is it sympa who's altering this signature?
>> Can I fix it (if it is "my fault")?
>> Thxs
>>
>> Pascal
>> --
>> Received: from nm43-vm5.bullet.mail.gq1.yahoo.com 
>> (nm43-vm5.bullet.mail.gq1.yahoo.com [67.195.87.220])
>> xxx
>> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s2048; 
>> t=1478593132; bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=; 
>> h=Date:From:Reply-To:To:Subject:References:From:Subject; 
>> b=N6C8UltuP6jp4mZaWG43Y1ngel4R75RdftqTuXxYHngnseuGe5/2k2/H5pwVcJVe34gjtB33vMZm1j4yZ56M8++zNl4Asb4xV/6wwF+JL+ZGlcXTmfJdGlx5+GdukOzN6bX9Dz9Lvp5GpsYHZnWE8eANw0SeJ9t9wcvzKmNOYW+t9S53N27nfRfjYAwm7iZVmUsgbbZlpnW3NYrPOLoBGZX67aq6gsq877LKUyLLgLP5oszQnx3cUZAsgmjRuSYIIzjF42vfzjVjs7rOoO7royNl5O8BeFlgpevF/BDk2g2K7KXRTkkKtmDM
>>
>>
>> 
>> En date de : Lun 7.11.16, Sergiu Dumitriu  a écrit :
>>
>>  Objet: Re: [xwiki-users] Lots of disabled Yahoo email addresses on the 
>> xwiki.org lists
>>  À: "XWiki Users" , "XWiki Developers" 
>>  Date: Lundi 7 novembre 2016, 15h40
>>  
>>  By the way, all of
>>  Pascal's and Julio's emails (and other yahoo
>>  users)
>>  end up in my spam folder because of
>>  the broken DKIM signatures.
>>  
>>  On
>>  11/07/2016 09:24 AM, Sergiu Dumitriu wrote:
>>  > This is partially XWiki's
>>  infrastructure fault, too.
>>  > 
>>  > DMARC doesn't work well with mailing
>>  lists, since they tend to break
>>  > DKIM
>>  signatures. The only way to fix the problem (at least for
>>  the
>>  > majority of emails) is to remove
>>  the footer from the configuration.
>>  > 
>>  > So, options:
>>  > 
>>  > - remove the footer, which means that
>>  "incompetent" users will have a
>>  > hard time finding information about
>>  unsubscribing, but allows users from
>>  >
>>  modern email providers to subscribe
>>  > -
>>  keep the footer, which makes it harder for legitimate users
>>  to stay
>>  > subscribed
>>  >
>>  
>>
> 
> 


-- 
Sergiu Dumitriu
http://purl.org/net/sergiu
___
devs mailing list
devs@xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs

Re: [xwiki-devs] [xwiki-users] Lots of disabled Yahoo email addresses on the xwiki.org lists

2016-11-08 Thread Sergiu Dumitriu 
It's not your fault, it's XWiki's Mailman's fault.

The signature verifies that your original email is valid.

But Mailman appends the following to the bottom of the mails:

devs mailing list
devs@xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs

By adding this, the signature now fails. Since yahoo now says that mails
without a valid signature aren't trusted, your email becomes untrusted.

I see now that your mail doesn't have this signature anymore (hurray
XWiki infra!), and is now considered valid:

Authentication-Results: mx.google.com;
   dkim=pass header.i=@yahoo.fr;
   dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.fr

On 11/08/2016 03:40 AM, Pascal BASTIEN wrote:
> Hello,
> It is strange because my emails have a DKIM signature like here (piece of 
> header from a mail I sent from my xwiki email to myself at another adress).
> Is it sympa who's altering this signature?
> Can I fix it (if it is "my fault")?
> Thxs
> 
> Pascal
> --
> Received: from nm43-vm5.bullet.mail.gq1.yahoo.com 
> (nm43-vm5.bullet.mail.gq1.yahoo.com [67.195.87.220])
> xxx
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s2048; 
> t=1478593132; bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=; 
> h=Date:From:Reply-To:To:Subject:References:From:Subject; 
> b=N6C8UltuP6jp4mZaWG43Y1ngel4R75RdftqTuXxYHngnseuGe5/2k2/H5pwVcJVe34gjtB33vMZm1j4yZ56M8++zNl4Asb4xV/6wwF+JL+ZGlcXTmfJdGlx5+GdukOzN6bX9Dz9Lvp5GpsYHZnWE8eANw0SeJ9t9wcvzKmNOYW+t9S53N27nfRfjYAwm7iZVmUsgbbZlpnW3NYrPOLoBGZX67aq6gsq877LKUyLLgLP5oszQnx3cUZAsgmjRuSYIIzjF42vfzjVjs7rOoO7royNl5O8BeFlgpevF/BDk2g2K7KXRTkkKtmDM
> 
> 
> 
> En date de : Lun 7.11.16, Sergiu Dumitriu  a écrit :
> 
>  Objet: Re: [xwiki-users] Lots of disabled Yahoo email addresses on the 
> xwiki.org lists
>  À: "XWiki Users" , "XWiki Developers" 
>  Date: Lundi 7 novembre 2016, 15h40
>  
>  By the way, all of
>  Pascal's and Julio's emails (and other yahoo
>  users)
>  end up in my spam folder because of
>  the broken DKIM signatures.
>  
>  On
>  11/07/2016 09:24 AM, Sergiu Dumitriu wrote:
>  > This is partially XWiki's
>  infrastructure fault, too.
>  > 
>  > DMARC doesn't work well with mailing
>  lists, since they tend to break
>  > DKIM
>  signatures. The only way to fix the problem (at least for
>  the
>  > majority of emails) is to remove
>  the footer from the configuration.
>  > 
>  > So, options:
>  > 
>  > - remove the footer, which means that
>  "incompetent" users will have a
>  > hard time finding information about
>  unsubscribing, but allows users from
>  >
>  modern email providers to subscribe
>  > -
>  keep the footer, which makes it harder for legitimate users
>  to stay
>  > subscribed
>  >
>  
> 


-- 
Sergiu Dumitriu
http://purl.org/net/sergiu
___
devs mailing list
devs@xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs

Re: [xwiki-devs] [xwiki-users] Lots of disabled Yahoo email addresses on the xwiki.org lists

2016-11-08 Thread Pascal BASTIEN 
Hello,
It is strange because my emails have a DKIM signature like here (piece of 
header from a mail I sent from my xwiki email to myself at another adress).
Is it sympa who's altering this signature?
Can I fix it (if it is "my fault")?
Thxs

Pascal
--
Received: from nm43-vm5.bullet.mail.gq1.yahoo.com 
(nm43-vm5.bullet.mail.gq1.yahoo.com [67.195.87.220])
xxx
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s2048; 
t=1478593132; bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=; 
h=Date:From:Reply-To:To:Subject:References:From:Subject; 
b=N6C8UltuP6jp4mZaWG43Y1ngel4R75RdftqTuXxYHngnseuGe5/2k2/H5pwVcJVe34gjtB33vMZm1j4yZ56M8++zNl4Asb4xV/6wwF+JL+ZGlcXTmfJdGlx5+GdukOzN6bX9Dz9Lvp5GpsYHZnWE8eANw0SeJ9t9wcvzKmNOYW+t9S53N27nfRfjYAwm7iZVmUsgbbZlpnW3NYrPOLoBGZX67aq6gsq877LKUyLLgLP5oszQnx3cUZAsgmjRuSYIIzjF42vfzjVjs7rOoO7royNl5O8BeFlgpevF/BDk2g2K7KXRTkkKtmDM



En date de : Lun 7.11.16, Sergiu Dumitriu  a écrit :

 Objet: Re: [xwiki-users] Lots of disabled Yahoo email addresses on the 
xwiki.org lists
 À: "XWiki Users" , "XWiki Developers" 
 Date: Lundi 7 novembre 2016, 15h40
 
 By the way, all of
 Pascal's and Julio's emails (and other yahoo
 users)
 end up in my spam folder because of
 the broken DKIM signatures.
 
 On
 11/07/2016 09:24 AM, Sergiu Dumitriu wrote:
 > This is partially XWiki's
 infrastructure fault, too.
 > 
 > DMARC doesn't work well with mailing
 lists, since they tend to break
 > DKIM
 signatures. The only way to fix the problem (at least for
 the
 > majority of emails) is to remove
 the footer from the configuration.
 > 
 > So, options:
 > 
 > - remove the footer, which means that
 "incompetent" users will have a
 > hard time finding information about
 unsubscribing, but allows users from
 >
 modern email providers to subscribe
 > -
 keep the footer, which makes it harder for legitimate users
 to stay
 > subscribed
 >
 
___
devs mailing list
devs@xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs

Re: [xwiki-devs] [xwiki-users] Lots of disabled Yahoo email addresses on the xwiki.org lists

2016-11-07 Thread Sergiu Dumitriu 
By the way, all of Pascal's and Julio's emails (and other yahoo users)
end up in my spam folder because of the broken DKIM signatures.

On 11/07/2016 09:24 AM, Sergiu Dumitriu wrote:
> This is partially XWiki's infrastructure fault, too.
> 
> DMARC doesn't work well with mailing lists, since they tend to break
> DKIM signatures. The only way to fix the problem (at least for the
> majority of emails) is to remove the footer from the configuration.
> 
> So, options:
> 
> - remove the footer, which means that "incompetent" users will have a
> hard time finding information about unsubscribing, but allows users from
> modern email providers to subscribe
> - keep the footer, which makes it harder for legitimate users to stay
> subscribed
> 
> On 11/02/2016 07:57 AM, Vincent Massol wrote:
>> Hi everyone,
>>
>> Just to let you know that on the 28th of October, there were 234 members of 
>> the xwiki users list who’ve been automatically disabled (ie they’re not 
>> going to receive mails). This is apparently caused by a change in Yahoo’s 
>> email policy:
>>
>> : host gmail-smtp-in.l.google.com[74.125.133.27] said:
>>550-5.7.1 Unauthenticated email from yahoo.com.br is not accepted due to
>>550-5.7.1 domain's DMARC policy. Please contact the administrator of
>>550-5.7.1 yahoo.com.br domain if this was a legitimate mail. Please visit
>>550-5.7.1  https://support.google.com/mail/answer/2451690 to learn about
>>the 550 5.7.1 DMARC initiative. o3si17254181wjx.109 - gsmtp (in reply to
>>end of DATA command)
>>
>> So if you’re in that case, please contact Yahoo as mentioned in the message 
>> above.
>>
>> Thanks
>> -Vincent
> 
> 


-- 
Sergiu Dumitriu
http://purl.org/net/sergiu
___
devs mailing list
devs@xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs

Re: [xwiki-devs] [xwiki-users] Lots of disabled Yahoo email addresses on the xwiki.org lists

2016-11-07 Thread Sergiu Dumitriu 
Forgot to mention the second component of DMARC, SPF, which is also
partially broken by XWiki's infrastructure. The problem with SPF is that
mails for @xwiki.org are forwarded by xwiki.org to xwiki.com
(gmail.com in reality), and this forwarding isn't allowed by a strictly
configured SPF domain. There's no easy fix for this, the only solution
would be to replace self-hosted mailing lists with Google Groups, so
that xwiki.org also becomes an alias for gmail.com

On 11/07/2016 09:24 AM, Sergiu Dumitriu wrote:
> This is partially XWiki's infrastructure fault, too.
> 
> DMARC doesn't work well with mailing lists, since they tend to break
> DKIM signatures. The only way to fix the problem (at least for the
> majority of emails) is to remove the footer from the configuration.
> 
> So, options:
> 
> - remove the footer, which means that "incompetent" users will have a
> hard time finding information about unsubscribing, but allows users from
> modern email providers to subscribe
> - keep the footer, which makes it harder for legitimate users to stay
> subscribed
> 
> On 11/02/2016 07:57 AM, Vincent Massol wrote:
>> Hi everyone,
>>
>> Just to let you know that on the 28th of October, there were 234 members of 
>> the xwiki users list who’ve been automatically disabled (ie they’re not 
>> going to receive mails). This is apparently caused by a change in Yahoo’s 
>> email policy:
>>
>> : host gmail-smtp-in.l.google.com[74.125.133.27] said:
>>550-5.7.1 Unauthenticated email from yahoo.com.br is not accepted due to
>>550-5.7.1 domain's DMARC policy. Please contact the administrator of
>>550-5.7.1 yahoo.com.br domain if this was a legitimate mail. Please visit
>>550-5.7.1  https://support.google.com/mail/answer/2451690 to learn about
>>the 550 5.7.1 DMARC initiative. o3si17254181wjx.109 - gsmtp (in reply to
>>end of DATA command)
>>
>> So if you’re in that case, please contact Yahoo as mentioned in the message 
>> above.
>>
>> Thanks
>> -Vincent
> 
> 


-- 
Sergiu Dumitriu
http://purl.org/net/sergiu
___
devs mailing list
devs@xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs

Re: [xwiki-devs] [xwiki-users] Lots of disabled Yahoo email addresses on the xwiki.org lists

2016-11-07 Thread Sergiu Dumitriu 
This is partially XWiki's infrastructure fault, too.

DMARC doesn't work well with mailing lists, since they tend to break
DKIM signatures. The only way to fix the problem (at least for the
majority of emails) is to remove the footer from the configuration.

So, options:

- remove the footer, which means that "incompetent" users will have a
hard time finding information about unsubscribing, but allows users from
modern email providers to subscribe
- keep the footer, which makes it harder for legitimate users to stay
subscribed

On 11/02/2016 07:57 AM, Vincent Massol wrote:
> Hi everyone,
> 
> Just to let you know that on the 28th of October, there were 234 members of 
> the xwiki users list who’ve been automatically disabled (ie they’re not going 
> to receive mails). This is apparently caused by a change in Yahoo’s email 
> policy:
> 
> : host gmail-smtp-in.l.google.com[74.125.133.27] said:
>550-5.7.1 Unauthenticated email from yahoo.com.br is not accepted due to
>550-5.7.1 domain's DMARC policy. Please contact the administrator of
>550-5.7.1 yahoo.com.br domain if this was a legitimate mail. Please visit
>550-5.7.1  https://support.google.com/mail/answer/2451690 to learn about
>the 550 5.7.1 DMARC initiative. o3si17254181wjx.109 - gsmtp (in reply to
>end of DATA command)
> 
> So if you’re in that case, please contact Yahoo as mentioned in the message 
> above.
> 
> Thanks
> -Vincent


-- 
Sergiu Dumitriu
http://purl.org/net/sergiu
___
devs mailing list
devs@xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs