[ARIN-consult] Community Consultation on DMARC for ARIN Mailing Lists

[Kevin Blumberg]

I may be wrong but I believe the question is wrong.

1.  Should ARIN implement DMARC for ARIN mailing lists?

Is the intention to setup DMARC on arin.net or mitigate issues that are created by DMARC on arin.net mailing lists? 

If the question was Should ARIN implement features to mitigate mail issues caused by DMARC?

Then yes, using the features in Mailman 2.x to rewrite the from address should be done. Not just to fix issues with DMARC but SPF as well.

The only downside that I am aware of is direct replying to a message, off the list, is more difficult, but mail deliverability is more consistent as it is only coming from arin.net.

Regarding question 2 I would suggest switching one mailing list and seeing the result.

Thanks,

Kevin Blumberg

-----Original Message-----
From: ARIN-consult [mailto:arin-consult-bounces at arin.net] On Behalf Of ARIN
Sent: Tuesday, August 22, 2017 9:57 AM
To: ARIN-consult at arin.net
Subject: [ARIN-consult] Community Consultation on DMARC for ARIN Mailing Lists

ARIN received a suggestion via the ARIN Consultation and Suggestion Process (ACSP) to add DMARC (Domain-based Message Authentication, Reporting, and Conformance) support to ARIN mailing lists. In our response to the suggestion we indicated a community consultation would be conducted by Q3 of 2017 to support our research into a possible ARIN implementation.

https://www.arin.net/participate/acsp/suggestions/2017-11.html

A description of DMARC is currently available inside Informational RFC
7489:
https://tools.ietf.org/html/rfc7489

Additional draft documents are also being worked on inside the DMARC Working Group of the IETF:
https://datatracker.ietf.org/wg/dmarc/documents/

The author of ACSP 2017.11 also provided reference to a Mailman support page for DMARC (note that ARIN currently uses Mailman 2):
https://wiki.list.org/DEV/DMARC

In our initial response to ACSP 2017.11, we indicated it was not at the time clear if it was possible to operate a mailing list in a manner which both meets existing community expectations for mailing list behavior and conforms to DMARC's expectations regarding header/sender alignment. We offer the following questions to solicit your input on this topic. Provided there is support to move forward with a DMARC implementation, your feedback will be used to help inform the development of a plan that accommodates DMARC and prevents potential negative impacts to participants on ARIN mailing lists.

1.  Should ARIN implement DMARC for ARIN mailing lists?

2.  Do you have guidance you would like ARIN to consider when implementing DMARC for ARIN mailing lists?

Your answers to these questions, including any additional information you would like to provide, will help guide our next steps in response to ACSP 2017.11. Thank you for your participation in the ARIN Consultation and Suggestion Process. This consultation will remain open until Friday,
15 September 2017.

If you have any questions, please contact us at info at arin.net.

Regards,

John Curran
President and CEO
American Registry for Internet Numbers (ARIN)

_______________________________________________
ARIN-Consult
You are receiving this message because you are subscribed to the ARIN Consult Mailing List (ARIN-consult at arin.net).
Unsubscribe or manage your mailing list subscription at:
http://lists.arin.net/mailman/listinfo/arin-consult Please contact the ARIN Member Services Help Desk at info at arin.net if you experience any issues.