Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Murray S. Kucherawy
> -Original Message- > From: mailman-developers-bounces+msk=cloudmark@python.org > [mailto:mailman-developers-bounces+msk=cloudmark@python.org] On Behalf Of > Barry Warsaw > Sent: Monday, December 05, 2011 4:54 PM > To: Monica Chew > Cc: Terri Oda; mailman-developers@python.org >

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Terri Oda
On 12/06/11 11:17, Murray S. Kucherawy wrote: It depends on your expectations. If there's an expectation that the author's signature will/should/must persist through a mailing list, then I agree that they're largely incompatible. If on the other hand you intend for lists to re-sign mail and

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Murray S. Kucherawy
> -Original Message- > From: mailman-developers-bounces+msk=cloudmark@python.org > [mailto:mailman-developers-bounces+msk=cloudmark@python.org] On Behalf Of > Terri Oda > Sent: Tuesday, December 06, 2011 11:36 AM > To: mailman-developers@python.org > Subject: Re: [Mailman-Develope

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Mark Sapiro
On 12/5/2011 10:58 AM, Monica Chew wrote: > For context, I work at Google on Gmail spam, and one of the things we've > been doing as an anti-phishing measure is enforcing that mail from certain > highly-phished domains must be signed with the DKIM key of the purported > sender. We started this sev

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Barry Warsaw
On Dec 05, 2011, at 05:12 PM, Monica Chew wrote: >> Mailman 3 supports list-styles, which in theory are composable.  Coming up >> with a good ui for that is a whole 'nuther issue, but the core could support >> something like this fairly easily. > >Could you elaborate more? I couldn't turn up docum

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Barry Warsaw
On Dec 06, 2011, at 10:17 AM, Murray S. Kucherawy wrote: >> I think this is the one big lesson from these discussions: DKIM is >> mostly incompatible with mailing lists. Where the two must be >> integrated, some usability will likely be compromised. > >It depends on your expectations. If there's

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Barry Warsaw
On Dec 06, 2011, at 12:36 PM, Terri Oda wrote: >As a developer, this sounds the makings of one of those life-sucking projects >you shouldn't touch with a 10-foot pole unless you're getting paid to define >and defend a standard. There's no guarantee that anything we choose to do >will ever be cons

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Florian Fuchs
Hi, > users will balk at having the subject line tags removed, and many list > owners will balk at having unsubscribe footers removed, Agreed. OTOH, if this were yet another setting, it would be the list owner's decision to use it or not. > That said, we've talked a lot about having simplifi

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Monica Chew
Hi Terri, On Tue, Dec 6, 2011 at 11:36 AM, Terri Oda wrote: > There were a lot of "it depends" in your email, so maybe I've mis-read, but > it sounds to me like the long-term path of least user/list admin hassle for > Mailman probably is to just re-sign the messages.  Except that there's no > sta

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Monica Chew
On Tue, Dec 6, 2011 at 1:30 PM, Mark Sapiro wrote: > On 12/5/2011 10:58 AM, Monica Chew wrote: > >> For context, I work at Google on Gmail spam, and one of the things we've >> been doing as an anti-phishing measure is enforcing that mail from certain >> highly-phished domains must be signed with t

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Monica Chew
> My own personal feeling is that having lists re-sign messages is the best > expectation to put forward.  You're subscribed to a mailing list, so you trust > that list much more than you trust the senders on that list.  So having the > mailing list site re-sign the outgoing messages seems to me to

Re: [Mailman-Developers] feature request: one-click setting topreserve DKIM

2011-12-06 Thread Mark Sapiro
Monica Chew wrote: > >In any case, a non-default setting is not going to solve the problem >of senders from highly-phished domains to communicate with gmail and >yahoo users through mailman. How would the list members even know to >change this setting? The same way they now know that they aren't

Re: [Mailman-Developers] feature request: one-click setting topreserve DKIM

2011-12-06 Thread Mark Sapiro
Monica Chew wrote: > >This is why Google Groups removes incoming DKIM signatures and >re-signs, because chances that the original signature survives are >vanishingly small given most people's list settings. And it is fairly simple to configure a Mailman installation to do the same, but this won't

Re: [Mailman-Developers] feature request: one-click setting topreserve DKIM

2011-12-06 Thread Monica Chew
On Tue, Dec 6, 2011 at 4:23 PM, Mark Sapiro wrote: > Monica Chew wrote: >> >>This is why Google Groups removes incoming DKIM signatures and >>re-signs, because chances that the original signature survives are >>vanishingly small given most people's list settings. > > > And it is fairly simple to c

Re: [Mailman-Developers] feature request: one-click setting to preserve DKIM

2011-12-06 Thread Stephen J. Turnbull
Barry Warsaw writes: > My own personal feeling is that having lists re-sign messages is the best > expectation to put forward. You're subscribed to a mailing list, so you > trust > that list much more than you trust the senders on that list. But as Monica points out, sometimes you need to e