Re: [dmarc-ietf] Topic for IETF 112 - Policy Discovery

2021-10-25 Thread Douglas Foster
For me, the appeal of a tree walk would be to eliminate the PSL. But an artificially constructed domain name could have more than 100 segments, so walking the entire tree seems like an opportunity for denial of service attacks. If we walk up from the bottom and quit too soon, a phony but long

Re: [dmarc-ietf] Topic for IETF 112 - Policy Discovery

2021-10-25 Thread Brotman, Alex
I know there has been a fair bit of talk about walk-the-tree. Taking a 24h set of data, and trying to measure the number of times where this situation may be warranted. We can try to make a guess the goal is to look for a DMARC policy between the 5322.From which has an unknown number of

[dmarc-ietf] Topic for IETF 112 - Policy Discovery

2021-10-25 Thread Todd Herr
Greetings. There are, by my count, eleven tickets that are primarily focused on or at least touch on the issue of policy discovery. A specialized query for them is at this URL - https://trac.ietf.org/trac/dmarc/report/15 The question of policy discovery has a few options as its answer: -

Re: [dmarc-ietf] DMARC variations

2021-10-25 Thread Tobias Herkula
I’m the Author of that pamphlet and yes „slow-entry“ stands for rate limiting, as we do not plan to reject traffic completly, I also would like to mention that this is a WIP document and I’m fascinated that it pops up here, as it only was a small comment on a completly different topic. I would