Re: [dmarc-ietf] I-D Action: draft-ietf-dmarc-dmarcbis-07.txt

2022-04-20 Thread Barry Leiba
>> Glad to have your opinion on this. What is your process for determining >> whether a private registrar's clients use their subtree for mail? > > Look at them and see if they'd be plausibly be used for mail. And to throw something else out here: "Look at them and see if they'd be plausibly be

Re: [dmarc-ietf] I-D Action: draft-ietf-dmarc-dmarcbis-07.txt

2022-04-20 Thread John Levine
It appears that Douglas Foster said: >-=-=-=-=-=- > >Glad to have your opinion on this. What is your process for determining >whether a private registrar's clients use their subtree for mail? Look at them and see if they'd be plausibly be used for mail. Those Amazon subtress are names they u

Re: [dmarc-ietf] I-D Action: draft-ietf-dmarc-aggregate-reporting-05.txt

2022-04-20 Thread Brotman, Alex
The main gist of the change was resolving a few inconsistencies that were reported, as well as a few typos. Thanks folks. -- Alex Brotman Sr. Engineer, Anti-Abuse & Messaging Policy Comcast > -Original Message- > From: dmarc On Behalf Of internet- > dra...@ietf.org > Sent: Wednesday, A

[dmarc-ietf] I-D Action: draft-ietf-dmarc-aggregate-reporting-05.txt

2022-04-20 Thread internet-drafts
A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Domain-based Message Authentication, Reporting & Conformance WG of the IETF. Title : DMARC Aggregate Reporting Author : Alex Brotman Filena

Re: [dmarc-ietf] I-D Action: draft-ietf-dmarc-dmarcbis-07.txt

2022-04-20 Thread Scott Kitterman
No. We went through all this before and that's not correct. Tree walk is no worse than the PSL for private registries. For public registries it is in many cases much better. In many cases IANA has contractual control that is much stronger than any management controls in the PSL. There's not

Re: [dmarc-ietf] I-D Action: draft-ietf-dmarc-dmarcbis-07.txt

2022-04-20 Thread Douglas Foster
This is a fundamental flaw in the design, not a problem to be fixed on a case-by-case basis. Under the tree walk, any private registry client can impersonate the parent or a sibling, simply by publishing a non-org DMARC policy and then letting the tree walk proceed into the parent organization. Y