[ARIN-consult] Community Consultation on DMARC for ARIN Mailing Lists

[ARIN]

ARIN received a suggestion via the ARIN Consultation and Suggestion 
Process (ACSP) to add DMARC (Domain-based Message Authentication, 
Reporting, and Conformance) support to ARIN mailing lists. In our 
response to the suggestion we indicated a community consultation would 
be conducted by Q3 of 2017 to support our research into a possible ARIN 
implementation.

https://www.arin.net/participate/acsp/suggestions/2017-11.html

A description of DMARC is currently available inside Informational RFC 
7489:
https://tools.ietf.org/html/rfc7489

Additional draft documents are also being worked on inside the DMARC 
Working Group of the IETF:
https://datatracker.ietf.org/wg/dmarc/documents/

The author of ACSP 2017.11 also provided reference to a Mailman support 
page for DMARC (note that ARIN currently uses Mailman 2):
https://wiki.list.org/DEV/DMARC

In our initial response to ACSP 2017.11, we indicated it was not at the 
time clear if it was possible to operate a mailing list in a manner 
which both meets existing community expectations for mailing list 
behavior and conforms to DMARC's expectations regarding header/sender 
alignment. We offer the following questions to solicit your input on 
this topic. Provided there is support to move forward with a DMARC 
implementation, your feedback will be used to help inform the 
development of a plan that accommodates DMARC and prevents potential 
negative impacts to participants on ARIN mailing lists.

1.  Should ARIN implement DMARC for ARIN mailing lists?

2.  Do you have guidance you would like ARIN to consider when 
implementing DMARC for ARIN mailing lists?

Your answers to these questions, including any additional information 
you would like to provide, will help guide our next steps in response to 
ACSP 2017.11. Thank you for your participation in the ARIN Consultation 
and Suggestion Process. This consultation will remain open until Friday, 
15 September 2017.

If you have any questions, please contact us at info at arin.net.

Regards,

John Curran
President and CEO
American Registry for Internet Numbers (ARIN)