Re: [dmarc-ietf] [dmarc-discuss] exegesis: pass and fail together

2016-07-07 Thread Tomki Camp
Multiple DKIM signature reporting is reasonable. However there have been report instances which overdid it, inserting multiple instances of the same domain+result[+selector]. It's certainly possible to re-sign a message with the same domain+selector and obtain the same verification result, but I d

Re: [dmarc-ietf] [dmarc-discuss] exegesis: pass and fail together

2016-07-07 Thread Steven M Jones
On 07/07/2016 11:54, Elizabeth Zwicky wrote: > > Tomki [Camp] pointed out that I am completely wrong about selectors and > lots of people report them. I should have checked. And I didn't check - I do see provision for selectors in the aggregate report XML in RFC7489. Is the question of messages

Re: [dmarc-ietf] [dmarc-discuss] exegesis: pass and fail together

2016-07-07 Thread Peter Goldstein
Being able to identify the service that originated a piece of email is extremely helpful in getting a domain to quarantine/reject. Including all DKIM signatures found on a message (not just those that are aligned or that pass) in the DMARC aggregate reports can be very helpful in ascertaining that

Re: [dmarc-ietf] [dmarc-discuss] exegesis: pass and fail together

2016-07-07 Thread Elizabeth Zwicky
Tomki pointed out that I am completely wrong about selectors and lots of people report them. I should have checked. Elizabeth zwi...@otoh.org > On Jul 7, 2016, at 11:38 AM, Steven M Jones wrote: > > I'm quoting the following response in a thread from the > dmarc-disc...@dmarc.org mailing li

Re: [dmarc-ietf] [dmarc-discuss] exegesis: pass and fail together

2016-07-07 Thread Steven M Jones
I'm quoting the following response in a thread from the dmarc-disc...@dmarc.org mailing list, because I think it identifies work items or at least questions this WG may want to address. If this is already captured somewhere, my apologies. Here's the original thread: http://lists.dmarc.org/piperma