Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Alessandro Vesely
On Sun 06/Aug/2023 18:07:15 + Jesse Thompson wrote: On Sat, Aug 5, 2023, at 6:50 AM, Laura Atkins wrote: [...] The replay attackers aren’t sending what we commonly think of as spam through the signers - as the message is sent to one recipient (not bulk) and it is opt-in (that recipient wa

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Jeremy Harris
On 07/08/2023 05:22, Jesse Thompson wrote: For messages which are originally submitted as BCC and, depending on the circumstances, it's necessary for us to identify the recipient in the headers, what is/should be the standard header to use for this purpose? BCC? Forwarded-to? There is no suc

Re: [Ietf-dkim] Proposals for tolerating mailing list modifications

2023-08-07 Thread Barry Leiba
> By all means, let's make this a cesspool of irrelevant junk. Especially for > junk that clearly has no clue about the > history of DKIM. Mike, that's out of line; please stop that sort of characterization. Barry ___ Ietf-dkim mailing list Ietf-dkim@

Re: [Ietf-dkim] Proposals for tolerating mailing list modifications

2023-08-07 Thread Barry Leiba
> I wasn't sure if I-Ds should set up normative references. Based on the > comments I'm guessing that I should > have. I can make a pass to fix all that. Yes, sure they should. Things that have to be understood in order to understand the I-D are normative. Things that just give additional inf

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Steffen Nurpmeso
Jeremy Harris wrote in <25aead67-8b9f-1db0-076d-12620a394...@wizmail.org>: |On 07/08/2023 05:22, Jesse Thompson wrote: |> For messages which are originally submitted as BCC and, depending \ |> on the circumstances, it's necessary for us to identify the recipient \ |> in the headers, what is/sh

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Steffen Nurpmeso
Steffen Nurpmeso wrote in <20230807170617.91_dg%stef...@sdaoden.eu>: |Jeremy Harris wrote in | <25aead67-8b9f-1db0-076d-12620a394...@wizmail.org>: ||On 07/08/2023 05:22, Jesse Thompson wrote: ... |ML-specific headers). That is, enable restoration and DKIM |checking of the original, pre-modi

[Ietf-dkim] draft-ietf-dkim-replay-problem comments

2023-08-07 Thread Murray S. Kucherawy
Hi, Some comments after a review of the adopted document: (1) I find the abstract is more readable if broken into three paragraphs, with the second starting "DKIM survives ..." and the third "This document discusses ...". (2) Throughout the document, the proper term "Replay Attack" (and sometime

Re: [Ietf-dkim] draft-ietf-dkim-replay-problem comments

2023-08-07 Thread Scott Kitterman
On Monday, August 7, 2023 6:53:19 PM EDT Murray S. Kucherawy wrote: ... > (2) Throughout the document, the proper term "Replay Attack" (and sometimes > "Replay") is used, but it's never directly defined. I don't think you need > it to be formal, but if you really want to do it that way, please add

Re: [Ietf-dkim] draft-ietf-dkim-replay-problem comments

2023-08-07 Thread Dave Crocker
On 8/7/2023 3:58 PM, Scott Kitterman wrote: I think a definition that describes a condition that's technically distinguishable from normal DKIM operations is essential if we are going to make any progress. Except that the draft notes that isn't possible. There's a fair amount of text in 1.1 th

Re: [Ietf-dkim] draft-ietf-dkim-replay-problem comments

2023-08-07 Thread Scott Kitterman
On August 7, 2023 11:10:07 PM UTC, Dave Crocker wrote: >On 8/7/2023 3:58 PM, Scott Kitterman wrote: >> I think a definition that describes a condition that's technically >> distinguishable from normal DKIM operations is essential if we are going to >> make any progress. > >Except that the draft no

Re: [Ietf-dkim] draft-ietf-dkim-replay-problem comments

2023-08-07 Thread Murray S. Kucherawy
On Mon, Aug 7, 2023 at 3:58 PM Scott Kitterman wrote: > On Monday, August 7, 2023 6:53:19 PM EDT Murray S. Kucherawy wrote: > ... > > (2) Throughout the document, the proper term "Replay Attack" (and > sometimes > > "Replay") is used, but it's never directly defined. I don't think you > need > >

Re: [Ietf-dkim] draft-ietf-dkim-replay-problem comments

2023-08-07 Thread Scott Kitterman
On Monday, August 7, 2023 7:47:47 PM EDT Murray S. Kucherawy wrote: > On Mon, Aug 7, 2023 at 3:58 PM Scott Kitterman > > wrote: > > On Monday, August 7, 2023 6:53:19 PM EDT Murray S. Kucherawy wrote: > > ... > > > > > (2) Throughout the document, the proper term "Replay Attack" (and > > > > som

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Jesse Thompson
On Mon, Aug 7, 2023, at 3:42 AM, Alessandro Vesely wrote: > On Sun 06/Aug/2023 18:07:15 + Jesse Thompson wrote: > > On Sat, Aug 5, 2023, at 6:50 AM, Laura Atkins wrote: > >>> [...] > >>> > >> The replay attackers aren’t sending what we commonly think of as spam > >> through the signers - as th

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Emanuel Schorsch
On Sun, Aug 6, 2023 at 10:23 PM Jesse Thompson wrote: > On Sun, Aug 6, 2023, at 2:00 PM, Emanuel Schorsch wrote: > > > > On Sun, Aug 6, 2023 at 11:52 AM Wei Chuang 40google@dmarc.ietf.org> wrote: > > > > On Sat, Aug 5, 2023 at 4:51 AM Laura Atkins > wrote: > > > > On 5 Aug 2023, at 02:43, J

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Murray S. Kucherawy
On Mon, Aug 7, 2023 at 7:43 PM Jesse Thompson wrote: > Similar to what Emmanuel is saying about detecting SPF/DKIM zone > misalignment, the solution to DKIM replay is for receivers to maintain some > state and feed it into bespoke replay detection algorithms. If all > receivers can maintain this

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Murray S. Kucherawy
On Mon, Aug 7, 2023 at 8:00 PM Emanuel Schorsch wrote: > If there are not that many BCC recipients for a message then it is likely > not necessary as the duplicate message counting is unlikely to have a > negative impact. If there are a large number of BCC recipients for a given > message then I

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Jesse Thompson
On Mon, Aug 7, 2023, at 10:24 PM, Murray S. Kucherawy wrote: > On Mon, Aug 7, 2023 at 7:43 PM Jesse Thompson wrote: >> __ >> Similar to what Emmanuel is saying about detecting SPF/DKIM zone >> misalignment, the solution to DKIM replay is for receivers to maintain some >> state and feed it into b

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Jesse Thompson
On Mon, Aug 7, 2023, at 10:54 PM, Murray S. Kucherawy wrote: > On Mon, Aug 7, 2023 at 8:00 PM Emanuel Schorsch > wrote: >> If there are not that many BCC recipients for a message then it is likely >> not necessary as the duplicate message counting is unlikely to have a >> negative impact. If th

Re: [Ietf-dkim] Call for adoption results: draft-ietf-dkim-replay-problem Adopted

2023-08-07 Thread Murray S. Kucherawy
On Mon, Aug 7, 2023 at 9:23 PM Jesse Thompson wrote: > On Mon, Aug 7, 2023, at 10:54 PM, Murray S. Kucherawy wrote: > > On Mon, Aug 7, 2023 at 8:00 PM Emanuel Schorsch 40google@dmarc.ietf.org> wrote: > > If there are not that many BCC recipients for a message then it is likely > not necessar