From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 4F25CA0548; Fri, 24 Sep 2021 11:24:28 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 424F641243; Fri, 24 Sep 2021 11:24:28 +0200 (CEST) Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) by mails.dpdk.org (Postfix) with ESMTP id 5CBD241257; Thu, 23 Sep 2021 19:27:27 +0200 (CEST) X-IronPort-AV: E=McAfee;i="6200,9189,10116"; a="287572521" X-IronPort-AV: E=Sophos;i="5.85,316,1624345200"; d="scan'208";a="287572521" Received: from orsmga006.jf.intel.com ([10.7.209.51]) by orsmga105.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 23 Sep 2021 10:27:26 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.85,316,1624345200"; d="scan'208";a="435892297" Received: from orsmsx601.amr.corp.intel.com ([10.22.229.14]) by orsmga006.jf.intel.com with ESMTP; 23 Sep 2021 10:27:26 -0700 Received: from orsmsx609.amr.corp.intel.com (10.22.229.22) by ORSMSX601.amr.corp.intel.com (10.22.229.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.12; Thu, 23 Sep 2021 10:27:24 -0700 Received: from orsmsx606.amr.corp.intel.com (10.22.229.19) by ORSMSX609.amr.corp.intel.com (10.22.229.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.12; Thu, 23 Sep 2021 10:27:24 -0700 Received: from ORSEDG601.ED.cps.intel.com (10.7.248.6) by orsmsx606.amr.corp.intel.com (10.22.229.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2242.12 via Frontend Transport; Thu, 23 Sep 2021 10:27:24 -0700 Received: from NAM11-DM6-obe.outbound.protection.outlook.com (104.47.57.174) by edgegateway.intel.com (134.134.137.102) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2242.12; Thu, 23 Sep 2021 10:26:47 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=M45wlJ5Lb1gmCIEIfMT1ARsYm84rABJKIqOKFZu8q6kcXm1r1aS1aBvr7fxraqXdheel2TcifLVaMPfTUKw1OqcGgHA+FoDF3AzKPj3o41geD0dh5w+AJyB95o51pV3V4eeHwFbX4fdn6T3/7n6UZze+XTg5eVgANjgAB04sA/A2Ji/Kf2dV5AhGgWd344zhw2CnES5rhPd8KVwTaU2H81FbWkfZThsk9jrlJpkxqwViJJAhEWtUvWmMZR0FrDhWy+McPS8VNv3l7dv7diDJ1cAzB49Z9p2Yw8M9bkjQDDJ/W7VCmZCGhx+9f6Uv83X+cEYKsr8cULqvwnoP91f1aw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=gbCYw2wmigjH20n9qmVBPb9fTGlUpfJImS3uEa7Oygk=; b=E/c1WYs6uc/pyOj7RcxVBRrQu3YmvLvIu2Q+4f7boM+ozN5xc2kwZ8ASHrEXyNklsuK9oWegInLd8Vl0aAS7VES69Qj1lS5zMxhuO9pTq9KCLfsBjeMmN/4N0729uGM/VaYWfkBecUnDqu2IC6MQhFX0IG/n5YQLzWfLDhBbb3ngZ0Ji4ngzZHMuDZZxxxhO5gaa+8ioKNIvlPwNRg+z4hd/efFziG/UsVsUSdmgV4KKYoF8r0DsTK065TEC9HP2Q1ZpgA7CzlwGCd0REhWzCZQGfc+WEuqYjEnH4T9Lw5GIahS4PyDEUZi3BiJWHSgAoqbVlE8qES/Fe1dAUt6jAw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=gbCYw2wmigjH20n9qmVBPb9fTGlUpfJImS3uEa7Oygk=; b=XLP3btnsy+mpzwO5tyvpHbqsv4HIpM+2PpyMea7pSOHZndWchokDOB0e+/r9jwitcvccgK+9XA8HiLQARYCeW4UDOrn3aE0swxDk3Q5POY+iiwTe0IE2BKCL0jYBCbhkqgvTd4SnNOZJFAVDmw14O/vzEp1s0vAx4CPmBeDqof4= Received: from SJ0PR11MB5678.namprd11.prod.outlook.com (2603:10b6:a03:3b8::22) by SJ0PR11MB5645.namprd11.prod.outlook.com (2603:10b6:a03:3b9::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4544.13; Thu, 23 Sep 2021 17:26:46 +0000 Received: from SJ0PR11MB5678.namprd11.prod.outlook.com ([fe80::a9ef:e87e:4a5e:3dac]) by SJ0PR11MB5678.namprd11.prod.outlook.com ([fe80::a9ef:e87e:4a5e:3dac%6]) with mapi id 15.20.4544.015; Thu, 23 Sep 2021 17:26:46 +0000 From: "St Leger, Jim" To: Ali Alnubani CC: "announce@dpdk.org" , "users@dpdk.org" , "web@dpdk.org" Thread-Topic: DMARC mitigation in dpdk.org's mailing list Thread-Index: AdewW3J1l7se5gCeQnK/zk7UDHZb2AARHpXQ Date: Thu, 23 Sep 2021 17:26:46 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-reaction: no-action dlp-version: 11.6.200.16 authentication-results: oss.nvidia.com; dkim=none (message not signed) header.d=none;oss.nvidia.com; dmarc=none action=none header.from=intel.com; x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 3868364f-bdef-4be1-4139-08d97eb75194 x-ms-traffictypediagnostic: SJ0PR11MB5645: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: AVQ9ixHq4aCDc0NbE79dyEm3tDpGgAS2x11af8c1sIRLqgRlNehM8IYFXvricidft9Gi1J/Tr5pFNgw7u5VZ6TEX6djq50qSFPl1x/77rP96oJhR3xhUBRb+0aObUeIhHh2iR55tsGj0SMXe/k92+rMIjMN/Rnz0WP1YovQx74wlIsf9mYAxxNjq9x/e4QsiYIMhDrNMoMqDh8m3pOcEE6Sljx9+ursAWz+2tvdOs2MgftFp1zi178IZZwcWxrSWSdPR6OCBSN+KPpxEs7YVreaCexWRgJiH5K6bDAlpvhBvS8h8vavON2RvwS/6jxSGZUJNXNTyeDweMwBKEAn+s9t+Rvr+7Y7P+ZmdPfscmydCMKeWaBIansF985mHWCZ05p9tc1G7kwRBi6dIut1q10qwjFjo3ilFvVBdVRYpjs88nnZj1+/ofcImH5EHmtT3Vf+Qf120YByambip2awcbUclmMTKA/h8S6pQIdnofXYRzvnM8BWz5XnPwwXIn6GQIy4JCs7BDe1WImmOoPO/mjYmieapdtPtLFstcwi0CR7iJDqT3qqSkthIqQwhygKJbhvxgGk4xSGHBfqbycxCiUYiU0YAlJQRmAThtRf+UF2bjzHHOR8IZiYLm/7E9/KU9KIQOeC/YM5PsPMZt+YYnJZGvV5coP4IFZUyw2EB1cXcv5Uki1L+XK2cD9JRJI/cewEeKuhmPOfYs4GaWPpzXsNwli7mAz8UryZODj+W6+eEVPmI3a4RbFH6pKvBGMHMBiFLeiZt4bbHDG12pA9e7LUEjpuqGXGjuxZ1RtYQ14kj1Ptu7ZXEyWNUKfv/yWbCmm8bsI3YLAsdVB0BxSMAkgM/U66IYeYzHzNslQA3rqQ= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SJ0PR11MB5678.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(8936002)(86362001)(54906003)(8676002)(6506007)(83380400001)(33656002)(4326008)(5660300002)(9686003)(122000001)(26005)(7696005)(53546011)(2906002)(508600001)(66946007)(52536014)(6916009)(66556008)(66476007)(76116006)(66446008)(186003)(71200400001)(316002)(38070700005)(64756008)(38100700002)(55016002)(223123001)(130980200001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?4qFOqoggg1JZLnQh5ZVW6lWBjH6k7VPzninwInK1gcMBN5vBjYpzgawdPpJt?= =?us-ascii?Q?v96ZuJdydlQaMZh4WDtF+R1XAMCmrzUH/49pEp54nCBad4THhlb3Dd150f4a?= =?us-ascii?Q?i8jgBzioj8iGckvs1FL393w7Hq2LYw6JZZYSLnsQfkT9c+YQufMxfUoNNOPz?= =?us-ascii?Q?m2edJwfSkIYZqm+yXXXqPUjyFlvNFLP+N0CV26/lMLX5evW+dhW9mTo+T5U/?= =?us-ascii?Q?b+CFGTOqkxe6woK6rzLMXy8DUCMozDTdCWYZFAa/YWttsIDN2xXusDW+WVTx?= =?us-ascii?Q?sgXJfc/V75RiO5RO2Y/WFg83XW5x4u82/pzoN3MF2H9lA9aNU/02lZDjuzV2?= =?us-ascii?Q?F6SiznUhviuiUDzj501ChwvC9NMzjNX2H8bkO2hR6aJdJL5NVsVaI/gQctwH?= =?us-ascii?Q?8jA1vDfEtgUmOW9NNRwT2xTv4kuTTdzpgHlrscdRkT+jj0j/M8cQolyR12Ss?= =?us-ascii?Q?gOn4H3DaCOYMdvDoXS0ac/uHBn9XHlkjZKYeW2UFBCgRySaYG1baAn8CLykD?= =?us-ascii?Q?JMThXnCintiyC+m8CAU7RwxsQoipPs604JbnQoFELvAzTFlm1wTQbyDF/sMa?= =?us-ascii?Q?8lTGKY9UcZn1Zz7DV84pdgEIx0Uylv5z9lJvZrCN9I999r54cgNv/OmGH/fL?= =?us-ascii?Q?6dtlbMKTTflervKpeEbX/RUqs3IJKM2kahBrUscC/N3lcHt7MZ9eTJuZOr77?= =?us-ascii?Q?wIY0Rwd9Lb7rLFfzVomCtMxp1p7iRTD/gQvmjL7XBX8ZwL7sjbF01uF7tTh5?= =?us-ascii?Q?7amNdXFBV04wH8VOd6LZrY3UzTnmOaiMRYwuXOOw9gYXOKga2ny0bYmhBLvY?= =?us-ascii?Q?HFEGI8+miYLxFlE71bgO58kYzP7QwnQpxj/ScjCwxs29qV0YPOmj71XQjVAu?= =?us-ascii?Q?Kdnd2TlQR/HWFQ2soLEv3yQMhTOD1MTktpXfxmGF7ob/Sfn0aYp6pbH4/sob?= =?us-ascii?Q?w3gek/MIeIyxWektbjipzUSPdZj2w0Cu6cAQQtUN/ewuvbrV8LsNNApuaUcY?= =?us-ascii?Q?6UibD5ITcgG8E2C3J4pPo/seDbqm/txpbu/1OUaoqLQDX7wfKGFT158ovhnW?= =?us-ascii?Q?3mZCxVb428O679x5DnJ4hGlX1zpmdXJIVUpKLsxaCCDNlCNrvKTI9cIZqjbA?= =?us-ascii?Q?via8Z5L8lneDOp8H9pmLeT4tfdyACnX6LNs+VpfeCyEEAvNZ1EC7dbtX2dEs?= =?us-ascii?Q?1yVCTKXlJ5reVMxF05Q71NHhIbIhiZnvOe/KS8lNYm9M6U3wn+UWP66X1zVd?= =?us-ascii?Q?NkjvtrPHcC5ouzjy/KGlBIwGn+t8b4yChNYrj5xLbSB6zGOuLwt+UhQpB9d7?= =?us-ascii?Q?siYnAIX7rRmncvElFwvb7ofw?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SJ0PR11MB5678.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3868364f-bdef-4be1-4139-08d97eb75194 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Sep 2021 17:26:46.1694 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: hEQw/iEwCbD+A76NQy0NoxGRqvqm4teV4XkvPFgXgE9ZQwZ1H1ryjg9MswbSvEhk09iDqRV/uVTxscyj9Zfq/Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR11MB5645 X-OriginatorOrg: intel.com X-Mailman-Approved-At: Fri, 24 Sep 2021 11:24:27 +0200 Subject: Re: [dpdk-web] DMARC mitigation in dpdk.org's mailing list X-BeenThere: web@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK website maintenance List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: web-bounces@dpdk.org Sender: "web" Ali: I have no expertise here. But have we explored moving from Mailman to group= s.io? I can't speak to the pros/cons of the two. I can only say that for many oth= er projects I'm involved in they use groups.io. (I can log in there and see= all of the projects/groups that I subscribe to.) Also, have you had this conversation with the Tech Board? It looks like the= dev@dpdk.org mailing list will be last. Is that also correct? Thanks, Jim -----Original Message----- From: announce On Behalf Of Ali Alnubani Sent: Thursday, September 23, 2021 2:15 AM To: announce@dpdk.org; users@dpdk.org; web@dpdk.org Subject: [dpdk-announce] DMARC mitigation in dpdk.org's mailing list Hi all, Due to the changes that Mailman (our mailing list software) does to posts b= efore distributing them, DKIM and DMARC verification will fail for emails o= riginating from the domains that support them. This causes some posts to go= into spam/quarantine and sometimes completely discarded depending on the d= omain's policy. DKIM (DomainKeys Identified Mail) is a form of email authentication that us= es public key cryptography to digitally sign outgoing emails. Senders add t= his signature to the headers of the email message for the receiving mail se= rvers to validate against. The sender specifies which of the original heade= rs is covered by this signature. DMARC (Domain-based Message Authentication, Reporting, and Conformance) bas= ically allows domains to publish policies that tell receiving mail servers = how to handle DKIM verification failures. Strict policies can be set to eit= her reject (message not delivered to user's mailbox), or quarantine (spam/j= unk) the messages failing them. I would like to propose making some mailing list configuration changes to m= itigate and reduce signature breakage: - Disable prepending subject prefixes (e.g., [dpdk-dev]). Making this change will probably break the rules and filters list members= have for their mailboxes if they filter by the subject prefix. Members can filter by Mailman's List-Id header instead, or by the To/Cc h= eaders. - Disable rewriting the "Sender" header. Mailman replaces this header by default with the list's bounce address to= direct bounces from some broken MTAs to the right destination. - Disable conversion of text/html to plain text. Mailman currently strips MIME attachments and does text/html to plain tex= t conversion. We experimented for a while with these changes in a test list we created (h= ttps://mails.dpdk.org/listinfo/test-dmarc), and we found that they helped i= n mitigating signature breakage. We tested with signed emails from the domains: nvidia.com, broadcom.com, an= d gmail.com. We verified that posts on the test list showed passing DKIM/DM= ARC results in their 'Authentication-Results' header. We plan on making these changes to users@dpdk.org and web@dpdk.org first, a= nd then to the rest of the lists once we make sure there are no unexpected = issues. Any feedback will be appreciated. Thanks, Ali