Re: Fwd: Re: mailing list question

On 2014-04-28 16:11, Kilian Evang wrote:
> On 28-04-14 16:24, jon judge wrote:
>> So, problem 1 may be fixable my changing the configuration of the 
>> mailing
>> list server so it always sends eg. [email protected], or 
>> whatever.
>> This will always be the identity of the sender, regardless of the real
>> person eg. [email protected].  It should be possible to inject the 
>> original
>> email into the message body or subject somehow to indicate where it 
>> came
>> from, or left off completely / whatever.
> 
> Messing with the "From:" line seems rather strange. Is that really what
> the hundreds of mailing lists that work are doing?
> 
> Kilian


Indeed. Dropping the original sender “From:” line is merely one flawed 
way of patching round a problem created by what many consider to be an 
inappropriate and flawed* DMARC policy by Yahoo -- who themselves are 
(ab)using DMARC to patch around another a security failing of their own 
making (namely weak security that led to the theft of millions of users' 
account details and their associated contact lists). This problem is 
cropping up on other mailing lists, including the IETF's.

http://www.ietf.org/mail-archive/web/ietf/current/msg87153.html
http://www.theregister.co.uk/2014/04/08/yahoo_breaks_every_mailing_list_in_the_world_says_email_guru/

Is it right to "break" some of the functionality of mailing list 
software for the majority of users in order to work around an 
inappropriate DMARC policy?

Best wishes,
      Chris

* Apparently Yahoo's DMARC policy is only trapping about 10% of Yahoo 
spam (with the other 90% passing the DMARC block)... while about 5% of 
their users are reported to be affected by the mailing list problem 
created by the DMARC policy.

-- 
Dr Chris Fox  <[email protected]>   http://Chris.FoxEarth.org
Reader in Computer Science,  University of Essex, CO4 3SQ, UK
Tel: +44 (0)1206 87 2576 | GnuPG: 1024D/488F6C2A | QRA: M0PXZ
_______________________________________________
SWI-Prolog mailing list
[email protected]
https://lists.iai.uni-bonn.de/mailman/listinfo.cgi/swi-prolog