nanog mailing list archives
Re: Yahoo DMARC breakage
From: Rich Kulawiec <rsk () gsp org>
Date: Wed, 9 Apr 2014 12:26:22 -0400
On Wed, Apr 09, 2014 at 07:13:47AM -0800, Royce Williams wrote:
Am I interpreting this correctly -- that Yahoo's implementation of DMARC is broken, such that anyone using a Yahoo address to participate in a mailing list is dead in the water?
Yes. It seems that Yahoo wasn't content with just breaking Flickr [1] but decided to branch out into email as well. John Levine's comments (in the first link you provided) have been, I think, the most articulate on the subject. The worst part of this is (a) it creates massive problems for everyone running mailing lists and (b) it doesn't solve any problems for anybody, including Yahoo and its users. Mitigation tactics vary, but one is to put everyone using a yahoo.com address on moderation, using whatever mechanism the mailing list manager (e.g. Mailman, majordomo, etc.) provides. Another is to encourage people with Yahoo accounts to move elsewhere. (There's nothing "wrong" with DMARC, per se, although I remain somewhat skeptical about its widespread/long-term utility. What's "wrong" here is that it's been badly misapplied to a use case that it doesn't fit. To borrow a line from Zathras, "This...is wrong tool.") ---rsk [1] http://boingboing.net/2014/04/07/restoring-cc-attribution-to-fl.html
Current thread:
- Yahoo DMARC breakage Royce Williams (Apr 09)
- Re: Yahoo DMARC breakage Rich Kulawiec (Apr 09)
- Re: Yahoo DMARC breakage Tom Simes (Apr 09)
- Re: Yahoo DMARC breakage Jim Popovitch (Apr 09)
- Re: Yahoo DMARC breakage Dave Crocker (Apr 09)
- Re: Yahoo DMARC breakage John Levine (Apr 09)
- Re: Yahoo DMARC breakage William Herrin (Apr 09)
- Re: Yahoo DMARC breakage Valdis . Kletnieks (Apr 09)
- Re: Yahoo DMARC breakage Ted Hatfield (Apr 09)
- Re: hack #2 for Yahoo DMARC breakage John R. Levine (Apr 09)
- Re: Yahoo DMARC breakage Jeff Kell (Apr 09)
- Re: Yahoo DMARC breakage Jim Popovitch (Apr 09)
- Re: Yahoo DMARC breakage John Levine (Apr 09)