Re: [mailop] DMARC in education

2015-06-18 Thread John Levine
>A good forwarder should preserve DKIM (and therefore DMARC test should pass). >My best guess is that >about 3% of mails is forwarded, maybe more for .edu. As Franck noted, there are a lot of bad forwarders, particularly in software from Redmond WA. There is also mailing list traffic, which peop

Re: [mailop] DMARC in education

2015-06-18 Thread John Levine
>> collecting statistics is fine, publishing a policy will make your users hate >> you, and you will deserve it. >Well, DMARC is like a lock on a door: It will keep valid users out too. You >must hand everyone a key >and they must use it (and never lose it). Even the neighbor that feeds the >cat

Re: [mailop] DMARC in education

2015-06-18 Thread Franck Martin
On Thu, Jun 18, 2015 at 1:36 AM, Kurt Andersen (b) wrote: > Matthew, > > I would suggest talking to the folks at Agari and Dmarcian (both are > linked from dmarc.org/resources). I intentionally kept the presentation > away from endorsing any particular vendors - partly because they change > over

Re: [mailop] DMARC in education

2015-06-18 Thread David Hofstee
Van: mailop [mailto:mailop-boun...@mailop.org] Namens Kurt Andersen (b) Verzonden: Thursday, June 18, 2015 10:37 AM Aan: Matthew Black CC: mailop@mailop.org Onderwerp: Re: [mailop] DMARC in education Matthew, I would suggest talking to the folks at Agari and Dmarcian (both are linked from dmarc.

Re: [mailop] DMARC in education

2015-06-18 Thread Kurt Andersen (b)
Matthew, I would suggest talking to the folks at Agari and Dmarcian (both are linked from dmarc.org/resources). I intentionally kept the presentation away from endorsing any particular vendors - partly because they change over time and partly because I think that's the right thing to do at a gener

Re: [mailop] DMARC in education

2015-06-18 Thread Mike Cardwell
* on the Thu, Jun 18, 2015 at 09:25:42AM +0200, David Hofstee wrote: > Hi, >> collecting statistics is fine, publishing a policy will make your users hate >> you, and you will deserve it. > Well, DMARC is like a lock on a door: It will keep valid users out too. You > must hand everyone a key and

Re: [mailop] DMARC in education

2015-06-18 Thread David Hofstee
John Levine Verzonden: Thursday, June 18, 2015 1:59 AM Aan: mailop@mailop.org CC: matthew.bl...@csulb.edu Onderwerp: Re: [mailop] DMARC in education >Looking at implementing DMARC for my institution. See the answers on NANOG. tl;dr, collecting statistics is fine, publishing a policy will make your

Re: [mailop] DMARC in education

2015-06-17 Thread John Levine
>Looking at implementing DMARC for my institution. See the answers on NANOG. tl;dr, collecting statistics is fine, publishing a policy will make your users hate you, and you will deserve it. R's, John ___ mailop mailing list mailop@mailop.org http://c

[mailop] DMARC in education

2015-06-17 Thread Matthew Black
Looking at implementing DMARC for my institution. We currently have an SPF record and use DKIM to sign a small subset of messages. Recommendations for rolling out DMARC suggest initially creating a "p=none" record to gather information on how a domain is being used. The RUA tag specifies a URI o