[Mailman-Developers] Re: --- in DMARC From: rewritings

2022-03-21 Thread Stephen J. Turnbull
Дилян Палаузов writes:

 > Since other MLMs have the option to include the full original-From:
 > address in the display-part of the From: header, mailman shall have
 > this option, too.

I'm thinking about it, but the question is "How?"

___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9


[Mailman-Developers] Re: --- in DMARC From: rewritings

2022-03-21 Thread Дилян Палаузов
Hello,

>  > In particular, we don't include the original From: @domain because
>  > of goal #2 [in dmarc.py]. We use --- to imply that something is
>  > missing. Perhaps ellipsis would have been a better choice, but we
>  > didn't want anything that even hinted at a domain.
> 
> OK, that makes some sense.  Here's goal #2:
> 
> # 2) the original From: address should not be in a comment or
> display
> #name in the new From: because it is claimed that multiple
> domains
> #in any fields in From: are indicative of spamminess.  This
> means
> #it should be in Reply-To: or Cc:.
> 
> I don't recall there being documentation of this claim.  I certainly
> believe it happens at least occasionally (I know several mail admins
> who will implement any filter that might eliminate 1 or more spams in
> the next decade ;-).  But is it really a major problem?
> 
> I'm coming around to the idea of a general format language for
> configuring various Mailman-generated texts with a bunch of standard
> codes (like strftime).  There are too many "minority" problems like
> the OP's (and I suspect "multiple addresses are spam" for that
> matter)
> for me to be comfortable ignoring the set, but on the other hand the
> number of options we'd have to provide to satisfy 1/10th of them
> would
> be insane, and unpopular with 99% of the folks considering changing
> the default.

“It is claimed that multiple domains in any fields in From: are
indicative for spamminess” is a rumour, which does not account for
real-world feasible use cases.

Since other MLMs have the option to include the full original-From:
address in the display-part of the From: header, mailman shall have
this option, too.

Greetings
  Дилян
___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9


[Mailman-Developers] Re: --- in DMARC From: rewritings

2022-03-18 Thread Mark Sapiro
I have just created https://gitlab.com/mailman/mailman/-/issues/989 to 
help deal with nonmember issues. Changing the munging of the ultimate 
display name is not included in that issue.


--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9


[Mailman-Developers] Re: --- in DMARC From: rewritings

2022-03-18 Thread Stephen J. Turnbull
Mark Sapiro writes:
 > On 3/17/22 10:19, Stephen J. Turnbull wrote:
 > > Дилян Палаузов writes:
 > > 
 > >   > realname = re.sub(r'@([^ .]+\.)+[^ .]+$', '---', realname)
 > > 
 > > The obvious hack is to change '---' to '', which you can do locally.
 > > 
 > > I'm not sure why we use '---', since it's not informative.  I will
 > > have to see if one of the other devs knows, or maybe there's something
 > > in the history.

 > In particular, we don't include the original From: @domain because
 > of goal #2 [in dmarc.py]. We use --- to imply that something is
 > missing. Perhaps ellipsis would have been a better choice, but we
 > didn't want anything that even hinted at a domain.

OK, that makes some sense.  Here's goal #2:

# 2) the original From: address should not be in a comment or display
#name in the new From: because it is claimed that multiple domains
#in any fields in From: are indicative of spamminess.  This means
#it should be in Reply-To: or Cc:.

I don't recall there being documentation of this claim.  I certainly
believe it happens at least occasionally (I know several mail admins
who will implement any filter that might eliminate 1 or more spams in
the next decade ;-).  But is it really a major problem?

I'm coming around to the idea of a general format language for
configuring various Mailman-generated texts with a bunch of standard
codes (like strftime).  There are too many "minority" problems like
the OP's (and I suspect "multiple addresses are spam" for that matter)
for me to be comfortable ignoring the set, but on the other hand the
number of options we'd have to provide to satisfy 1/10th of them would
be insane, and unpopular with 99% of the folks considering changing
the default.

I am considering adding this as a project to GSoC.  Comments welcome.

Steve

___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9


[Mailman-Developers] Re: --- in DMARC From: rewritings

2022-03-17 Thread Mark Sapiro

On 3/17/22 10:19, Stephen J. Turnbull wrote:

Дилян Палаузов writes:

  > realname = re.sub(r'@([^ .]+\.)+[^ .]+$', '---', realname)

The obvious hack is to change '---' to '', which you can do locally.

I'm not sure why we use '---', since it's not informative.  I will
have to see if one of the other devs knows, or maybe there's something
in the history.


There is history. Some of this is embodied in comments at 
https://gitlab.com/mailman/mailman/-/blob/master/src/mailman/handlers/dmarc.py#L71-85.


In particular, we don't include the original From: @domain because of 
goal #2. We use --- to imply that something is missing. Perhaps ellipsis 
would have been a better choice, but we didn't want anything that even 
hinted at a domain.


--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9