XSF Discussion - 2017-10-17

hmm, I didn't receive pep.'s mail to standards@

ahh, dwd points out it's a DMARC issue

the list needs reconfiguring then

mailman can re-write DMARC-affected emails to let them pass filters downstream, at the cost of usability

Flow: ah right it's probably me

I need to fix it

jonasw, No, it's doing exactly what it should. DMARC is broken, that's all.

My dmarc settings are too strict

Dkim is borken and I need to fix it

DMARC is just broken.

Why?

Created by the operators of Google Groups, Yahoo Groups, Facebook, etc... They had no interest in making mailing lists work, it didn't fit their business model.

And they did it outside the IETF and then forced it on everyone as a fait accompli.

Wasn't DKIM a Yahoo thing too?

Dmarc is not the spec issue here, it's just a reporting standard

Well + other niceties

pep.: Every time I read the DMARC spec it tells me that DKIM and SPF are both mandatory to deploy.

the issue*

Zash: no they're not

But yes you should probably

I should not

I tried

If you want dmarc to be useful

Mailing lists all borked

DMARC can be useful? :p

MLs are borked indeed :/

pep.: That's not how blame works on the internet!

But I would say it's more of a dkim issue

You require so much energy from me at not even 9am.. Still in the bed

While on the topic of email. dwd, your email where you told pep. about the dmarc issue, the text version is bad.

Quite possibly. Dodgy android gmail client.

It's pretty much identical to the email replied to

Took me forever to figure out that the text was quoted, because the only sign of that was a <div> in the html version.

I really need to switch to Fastmail or something. Partly inertia (I'd need to switch domain) and partly cost.

Apparently the trick to self-hosting is getting a gmail account.

I need to mitigate the spam problem a bit, that's the most annoying

Someday I'll install a spam filter

the XMPP spam problem?

Mail

spamassassin + imapsieve to train it

but ECHAN

ENOMEM

I personally don't want to mess with spam filters so I chose to use gmail

jonasw: I already have sieve yep, I just need to take time for spamassassin

DMARC has a FAQ entry for mailing lists ( https://dmarc.org/wiki/FAQ#I_operate_a_mailing_list_and_I_want_to_interoperate_with_DMARC.2C_what_should_I_do.3F ) one of suggestions is just to use mailing list in the From header and move sender to Reply-To header, some mailing lists have options like that (e.g. https://wiki.list.org/DEV/DMARC )

Wiktor, yes, it sucks

jonasw: I don't know, I'm not using Mailman but thanks for info!

you can do that with mailman, but since it mangles the From it makes lists harder to read

Aren't you supposed to set Sender?

depends, I think

some operate on the sender, some on From, some on SMTP-Mail-From

DMARC only cares about From, if you mangle that it's DMARC-OK :)

https://blog.agayon.be/sat_jp.html ==> nice blog post about SàT CLI frontend, if anywone want's do have an idea of its abilities.

Mmmm, what's this https://tools.ietf.org/html/draft-ietf-curdle-cms-eddsa-signatures-08

Wiktor, Please read RFC 5322. From is the author. DMARC is in the wrong here.

-rfc 5322

Zash: Internet Message Format. P. Resnick, Ed.. October 2008. (Updated by RFC6854) (Status: DRAFT STANDARD) https://tools.ietf.org/html/rfc5322

dwd, I see your point (re DMARC)

DKIM is not helping though is it?

(this morning's discussion, and your remark to Wiktor)

Well the issue is mailing list modifying email content or/and headers, appending footers, adding mailing list id to subject. If the email was not modified it'd pass DKIM checks and DMARC would be happy. Then you can have your From just fine :)