📅 Original date posted:2015-06-19
📝 Original message:On Fri, Jun 19, 2015 at 12:24 AM, Mike Hearn <mike at plan99.net> wrote:
> The new list currently has footers removed during testing. I am not
>> pleased with the need to remove the subject tag and footer to be more
>> compatible with DKIM users.
>>
>
> Lists can do what are effectively MITM attacks on people's messages in any
> way they like, if they resign for the messages themselves. That seems fair
> to me! :)
>
Mailman isn't resigning it. Should it be? Does other mailing list
software?
>
>
>> I'm guessing DKIM enforcement is not very common because of issues like
>> this?
>>
>
> DKIM is used by most mail on the internet. DMARC rules that publish in DNS
> statements like "All mail from bitpay.com is signed correctly so trash
> any that isn't" are used on some of the worlds most heavily phished domains
> like google.com, PayPal, eBay, and indeed BitPay.
>
> These rules are understood and enforced by all major webmail providers
> including Gmail. It's actually only rusty geek infrastructure that has
> problems with this, I've never heard of DKIM/DMARC users having issues
> outside of dealing with mailman. The vast majority of email users who never
> post to technical mailing lists benefit from it significantly.
>
> Really everyone should use them. Adding cryptographic integrity to email
> is hardly a crazy idea :)
>
I understand the reason to protect the "heavily phished" domains. I heard
that LKML does not modify the subject or add a footer, perhaps because it
would make it incompatible with DKIM of the several big corporate domains
who participate.
I suppose it is somewhat acceptable for us to remove subject tags and
footers if we have no choice...
Warren
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20150619/bce0b675/attachment.html>;
Warren Togami Jr. [ARCHIVE] /
npub1s5…zxem8
2023-06-07 15:38:52
in reply to nevent1q…ljw5
Author Public Key
npub1s5p2xnl52ksr3a4qfa8re5znmja46ugm3x3ayy0x2c2mqrsw6ewsmzxem8Published at
2023-06-07 15:38:52Event JSON
{
"id": "7ba7d5b09fb0236c3550e2cf17472d62311d07a0e8fbc6724564bb707bdd5733",
"pubkey": "8502a34ff455a038f6a04f4e3cd053dcbb5d711b89a3d211e65615b00e0ed65d",
"created_at": 1686152332,
"kind": 1,
"tags": [
[
"e",
"68431f1625fd57e06833873953eb80e2e3b94c7e8396ada58852db791460fa68",
"",
"root"
],
[
"e",
"e167c7cec670744897aa4d2283629f92768d9ca93066f12e847873e3140a4e52",
"",
"reply"
],
[
"p",
"f2c95df3766562e3b96b79a0254881c59e8639f23987846961cf55412a77f6f2"
]
],
"content": "📅 Original date posted:2015-06-19\n📝 Original message:On Fri, Jun 19, 2015 at 12:24 AM, Mike Hearn \u003cmike at plan99.net\u003e wrote:\n\n\u003e The new list currently has footers removed during testing. I am not\n\u003e\u003e pleased with the need to remove the subject tag and footer to be more\n\u003e\u003e compatible with DKIM users.\n\u003e\u003e\n\u003e\n\u003e Lists can do what are effectively MITM attacks on people's messages in any\n\u003e way they like, if they resign for the messages themselves. That seems fair\n\u003e to me! :)\n\u003e\n\nMailman isn't resigning it. Should it be? Does other mailing list\nsoftware?\n\n\n\u003e\n\u003e\n\u003e\u003e I'm guessing DKIM enforcement is not very common because of issues like\n\u003e\u003e this?\n\u003e\u003e\n\u003e\n\u003e DKIM is used by most mail on the internet. DMARC rules that publish in DNS\n\u003e statements like \"All mail from bitpay.com is signed correctly so trash\n\u003e any that isn't\" are used on some of the worlds most heavily phished domains\n\u003e like google.com, PayPal, eBay, and indeed BitPay.\n\u003e\n\u003e These rules are understood and enforced by all major webmail providers\n\u003e including Gmail. It's actually only rusty geek infrastructure that has\n\u003e problems with this, I've never heard of DKIM/DMARC users having issues\n\u003e outside of dealing with mailman. The vast majority of email users who never\n\u003e post to technical mailing lists benefit from it significantly.\n\u003e\n\u003e Really everyone should use them. Adding cryptographic integrity to email\n\u003e is hardly a crazy idea :)\n\u003e\n\nI understand the reason to protect the \"heavily phished\" domains. I heard\nthat LKML does not modify the subject or add a footer, perhaps because it\nwould make it incompatible with DKIM of the several big corporate domains\nwho participate.\n\nI suppose it is somewhat acceptable for us to remove subject tags and\nfooters if we have no choice...\n\nWarren\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20150619/bce0b675/attachment.html\u003e",
"sig": "073f8eb178f6024aecd8851347f0f1459e12f8eb6125d08ca2c018631e347b317650b050d45bd66bf9e6685d183bb9e6c9e23ca9c6b858206c77e3ad61e0e4f1"
}