From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <web-bounces@dpdk.org> Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id D4712A0C43; Thu, 23 Sep 2021 11:15:10 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id BF2AF41253; Thu, 23 Sep 2021 11:15:10 +0200 (CEST) Received: from AZHDRRW-EX02.NVIDIA.COM (azhdrrw-ex02.nvidia.com [20.64.145.131]) by mails.dpdk.org (Postfix) with ESMTP id 38D52410DD; Thu, 23 Sep 2021 11:15:09 +0200 (CEST) Received: from NAM12-DM6-obe.outbound.protection.outlook.com (104.47.59.175) by mxs.oss.nvidia.com (10.13.234.37) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.858.15; Thu, 23 Sep 2021 02:15:08 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ftVKWAMsEFPRuqeIDNdfXsOOB7h0Otggo+GAdEQcxbfcNzdoKKjzswSWRfGGA1ffNmMkAjn+xNg5r7nMMbsEYhKAzv2fuRQCnCkPZH1oP5fLtg0TMXQjzy1eLQFPubAxg+mNI4Q6nKJiLDRCEbD1WEVC8zgHkecSs/BOl06ZqLqxaRFne5rhLCemBrIpaYTLbBzTrwIjm6BPeMyatuqKYnZRE0dy9fkkHJVTtD9M0RfICeC0pWgaRaqZCoV+pCo/yBteggNAxQRNUnH2b3jg018n/4Fia2ZEz4ucZQLgEuE32QGFs3BdzcVWPVNMxnAuHfR7aVAUg+sGUF4ES/HIbQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=BUF7XSt+qCzKbUCof9+2SYO8W24yt1uARJcVzrffjpU=; b=k1cJ50mHSYWFocI795n2V/QKvoXEPOOkfcB4nM14JkoVc0WHe3BqovUmGgNxtmo5BXFdltzXIXbepApT01weeX3gGMf4Al0mg+D5EdppC8Ou2BJfPS7gbE2qHDoH9bklov76AtEV9AXHPedBz98Bfwug4+4/mp856fuDbEW6ioCrTty/I+vGYD/da+vMCIwtvS52TDnDX+wNseuYbNPfKHsABtLE81Iy4t4vkJdI6aqUYeApqzK8aZ/A3MXVMP1ODIUJgbXOir/aj3XAu1jTSwEsO8jv738DL/vKDCJcz5xg7VaGEW2SzMoywKJZeor3WUYrN61WyvE0UMo4ovXDeg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BUF7XSt+qCzKbUCof9+2SYO8W24yt1uARJcVzrffjpU=; b=bTZBzf3k8KxAZh30bO7/IZHdeCQ7hkTbNWu2MH/SoEbTtBxts3F2Y6MjHpMEX7pHS4otaaAn4PRzo68cYBXn+AEzLxrLlw75mUhKGphUT42txwJBCLSIzFKFUywhl1kQIL67+4Xcx9uqi2xy43xwzB+kMjhWq4qd0Z/Eun3B+1UVqUWcPELMSIkhl2FHhSMsuKQgjBiFCSCFIboqO1BEZa7eXvDUjg8bOQzBJ/fDdbLwxiodUlXyPsyTgu5pFKKmLhgq8P9u8EwWH9Zo40B2mf9HF/G7dI1tIldMuJyRtpAaJXCjhyXKcGIycYnLmHAVUgaFz46QnB06709eExfkwg== Received: from DM4PR12MB5167.namprd12.prod.outlook.com (2603:10b6:5:396::10) by DM4PR12MB5216.namprd12.prod.outlook.com (2603:10b6:5:398::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4544.14; Thu, 23 Sep 2021 09:15:07 +0000 Received: from DM4PR12MB5167.namprd12.prod.outlook.com ([fe80::3c73:8e07:c9ba:f6db]) by DM4PR12MB5167.namprd12.prod.outlook.com ([fe80::3c73:8e07:c9ba:f6db%3]) with mapi id 15.20.4544.015; Thu, 23 Sep 2021 09:15:07 +0000 From: Ali Alnubani <alialnu@oss.nvidia.com> To: "announce@dpdk.org" <announce@dpdk.org>, "users@dpdk.org" <users@dpdk.org>, "web@dpdk.org" <web@dpdk.org> Thread-Topic: DMARC mitigation in dpdk.org's mailing list Thread-Index: AdewW3J1l7se5gCeQnK/zk7UDHZb2A== Date: Thu, 23 Sep 2021 09:15:06 +0000 Message-ID: <DM4PR12MB5167367CB92A841E3E9B5B8ADAA39@DM4PR12MB5167.namprd12.prod.outlook.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dpdk.org; dkim=none (message not signed) header.d=none;dpdk.org; dmarc=none action=none header.from=nvidia.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: f0656ac8-bfaa-45ef-6ee0-08d97e72a2b9 x-ms-traffictypediagnostic: DM4PR12MB5216: x-microsoft-antispam-prvs: <DM4PR12MB52163E948EE5C3A53B885590DAA39@DM4PR12MB5216.namprd12.prod.outlook.com> x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DM4PR12MB5167.namprd12.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(86362001)(83380400001)(66476007)(66556008)(64756008)(508600001)(122000001)(8676002)(38100700002)(76116006)(66446008)(66946007)(2906002)(38070700005)(186003)(6506007)(52536014)(33656002)(8936002)(5660300002)(110136005)(55016002)(316002)(450100002)(71200400001)(7696005)(9686003)(26005)(223123001)(130980200001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?0JW5M9ahgXRetvxchi+7SsJ75E0kGs1ZfCZyGb/7EON5RFP+wVkqLpbiXbFA?= =?us-ascii?Q?a6qjT96bpTSuR5LRIkrgxY6kDP7p9RKOPd+ApRSMawg3LOBs1x8v2DXZKefU?= =?us-ascii?Q?NwDCaZC5JRGCxjcbz9C1/cLp64Jstr6uqNWO+AZPhoqP35sLku7kpSihdtBx?= =?us-ascii?Q?wUZvMssAuDx+RnIuW2n0EwPz2S09Nl6hgTZRkj1P71ILmABGBeOz0dUCX5Xh?= =?us-ascii?Q?eKIQM7mSp3yZMHvs7oisQnhbeAIACz3AxtO1xTBOjA8omKeQPoUSak+5FZpp?= =?us-ascii?Q?qN8YBQxwCS4wicwRCQ30277WWRXvCYPx/QJaOh+xZLYFCBUdvweoCCwfO0Il?= =?us-ascii?Q?rW0qEteI/PBoIaQdvXj8GNNrSBRHEHVPDCKaMnK431Xt4CFlI6G63mX2q85q?= =?us-ascii?Q?cm6V3DyFmxMOoLFkHvsQEtNSuAcMu6E/Bb2+0eWzSm4IKaF99xguPUvePIGW?= =?us-ascii?Q?wRHQtrK04EWabx72Tnr2zWz2eL0SRmlW/7jzTwmDvHcY2bIikq5v8liirY1m?= =?us-ascii?Q?1MQcgFEbHahhAD7kSXxiLJDgM58M9Txb9OeApVe7edy95bm/yQ2WKK2JPYSB?= =?us-ascii?Q?nuudbMaEdwY60pYbqGX01bBgJZHPccS8CtXxd7JanoGE8xajdgmLYa+m8T/J?= =?us-ascii?Q?+KxQpQSio15jhrUqVbV64KOh8zrEdIY4hoO9ZKUtm3C1HRDZ10TtmYEveZFR?= =?us-ascii?Q?j1C7DR51bLSNV6AGjQL2BD7evTgycClVqYQB64zzJpBTIK6ayQBtd9jzbZsZ?= =?us-ascii?Q?ncF4Sg8fBhN5K3eSwEPDm2qnQ/mOVvd6bNnav3W1mjZYKfAXROf9xMOeUZqX?= =?us-ascii?Q?v4hIfANTiEjCNr9CPVHTfIYBrpuTM/tAUYWzOcxkCQ+nwZE8lwJZa4ukFpTu?= =?us-ascii?Q?CC0YubgOTflbUuwbFwLbNDkg63B6oNh5eYYe0qzrznQVc1pW5A6jKw9oRH0/?= =?us-ascii?Q?8fi0BD7n1BF8WEV2AiD1q2X0mJGprJpU5yG7ccN6jJxDYX3xkekl7QN2Nb8E?= =?us-ascii?Q?PpwD8Z9zayZguyRfwBYLR9HcUr2mntgu8y3F1aUnftGJgIQC8fW/jNOxYz6p?= =?us-ascii?Q?xbd2144aXJvizEDfudYnbiuwfFi2Ly3Nt+L4uJHc3rT/Bf0OjZuyPWpOTlIi?= =?us-ascii?Q?0tDg5TODdPIn6Bb4K99T/c2TVLB1Rq8J5CHh6Xb5gtwHZf4/D9k5Ok4s8vzI?= =?us-ascii?Q?61yzput6tOkCXGfYZx5+tZkQNpQdxJ6UggrVDrCUI1d6y+MIkXjCkqqvfHrO?= =?us-ascii?Q?aOL4e0lxkpZ9rGjRJxfdmp1BYIK2Kb/pV7OBGef9H2LVDj/m5+neK9Yqk4JV?= =?us-ascii?Q?jwPHpD3kuAL7ocYHG6FeBgDb?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DM4PR12MB5167.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: f0656ac8-bfaa-45ef-6ee0-08d97e72a2b9 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Sep 2021 09:15:06.7444 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +oVPa/cFAJTsSmz+IqjnmBe2dtHGQKyqwL1hgr3dCsw14m251KtrNL5FCLLikRXtxz0lD/yjG86yTriyrDxVEQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM4PR12MB5216 Subject: [dpdk-web] DMARC mitigation in dpdk.org's mailing list X-BeenThere: web@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK website maintenance <web.dpdk.org> List-Unsubscribe: <https://mails.dpdk.org/options/web>, <mailto:web-request@dpdk.org?subject=unsubscribe> List-Archive: <http://mails.dpdk.org/archives/web/> List-Post: <mailto:web@dpdk.org> List-Help: <mailto:web-request@dpdk.org?subject=help> List-Subscribe: <https://mails.dpdk.org/listinfo/web>, <mailto:web-request@dpdk.org?subject=subscribe> Errors-To: web-bounces@dpdk.org Sender: "web" <web-bounces@dpdk.org> Hi all, Due to the changes that Mailman (our mailing list software) does to posts b= efore distributing them, DKIM and DMARC verification will fail for emails o= riginating from the domains that support them. This causes some posts to go= into spam/quarantine and sometimes completely discarded depending on the d= omain's policy. DKIM (DomainKeys Identified Mail) is a form of email authentication that us= es public key cryptography to digitally sign outgoing emails. Senders add t= his signature to the headers of the email message for the receiving mail se= rvers to validate against. The sender specifies which of the original heade= rs is covered by this signature. DMARC (Domain-based Message Authentication, Reporting, and Conformance) bas= ically allows domains to publish policies that tell receiving mail servers = how to handle DKIM verification failures. Strict policies can be set to eit= her reject (message not delivered to user's mailbox), or quarantine (spam/j= unk) the messages failing them. I would like to propose making some mailing list configuration changes to m= itigate and reduce signature breakage: - Disable prepending subject prefixes (e.g., [dpdk-dev]). Making this change will probably break the rules and filters list members= have for their mailboxes if they filter by the subject prefix. Members can filter by Mailman's List-Id header instead, or by the To/Cc h= eaders. - Disable rewriting the "Sender" header. Mailman replaces this header by default with the list's bounce address to= direct bounces from some broken MTAs to the right destination. - Disable conversion of text/html to plain text. Mailman currently strips MIME attachments and does text/html to plain tex= t conversion. We experimented for a while with these changes in a test list we created (h= ttps://mails.dpdk.org/listinfo/test-dmarc), and we found that they helped i= n mitigating signature breakage. We tested with signed emails from the domains: nvidia.com, broadcom.com, an= d gmail.com. We verified that posts on the test list showed passing DKIM/DM= ARC results in their 'Authentication-Results' header. We plan on making these changes to users@dpdk.org and web@dpdk.org first, a= nd then to the rest of the lists once we make sure there are no unexpected = issues. Any feedback will be appreciated. Thanks, Ali