26 Matching Annotations
  1. Dec 2019
    1. A very common case in the Internet today involves submission of the original message to an intermediate, "message submission" server, which is similar to a relay but has some additional properties; such servers are discussed in Section 2.3.10

      Section 2.3.10 doesn't actually treat submission.

    2. Note that the key difference between handling aliases (Section 3.9.1) and forwarding (this subsection) is the change to the backward-pointing address in this case

      This sentence does not belong here, but in Section 3.2 List, where it is repeated exactly like. See yam ticket 6 and 9.

    3. Note that the key difference between handling aliases (Section 3.9.1) and forwarding (this subsection) is the change to the backward-pointing address in this case.

      This is the sentence referenced from Section 4.4 Trace information.

      Forwarding is not the title of this subsection. See Erratum 1820.

    4. There are circumstances, contrary to the intent of this specification, in which an SMTP server may receive an indication that the underlying TCP connection has been closed or reset. To preserve the robustness of the mail system, SMTP servers SHOULD be prepared for this condition and SHOULD treat it as if a QUIT had been received before the connection disappeared.

      TCP reset is completely different from RSET command. This text can be moved to an appropriate section. See Erratum 1851.

    5. Proposed erratum (4055) suggests that DKIM and SPF have nothing to do with this and that everything after the first sentence should be dropped. An alternative would be to tune the texts.

      Even if, given the cost of verifying the return path, one would choose to limit the verification to non-authenticated messages, it is a totally heuristic choice, not worth the length it would take.

  2. Mar 2017
    1. The report itself contains data about messages addressed to users at gmail.com and many other domains hosted by Google

      This implies a receiver cannot attempt to match received reports with the mail it sent. Looking up Public Suffix List does not disclose that google and gmail belong to the same organization.

    2. DMARC aggregate reports should use UTC day boundaries for the reporting intervals.

      Reports can be sent some time after the end of the interval. (A difficulty is to set a cron job at UTC, so I send with one hour delay.)

    3. Incremental Roll-Out.

      A possibility is to enable/disable honoring DMARC policy on a per-domain basis (I currently have globally disable and enable on a few domains which send only transactional mail).

      Perhaps, the possibility to override the remote policy should also be considered.

    4. The collection of feedback statistics for use in generating DMARC aggregate likely presents the most opportunity for new development.

      An important consideration is the sending domains database. SMTP specification need no database (except the ubiquitous DNS). DMARC needs some kind of database in order to send reports. This need should be enounced early in this document. Many practices can then be expressed in terms of database operations and structure.

  3. Oct 2016
  4. Sep 2016
    1. Figure 1 illustrates the relationship between verification conditions and Authentication-Results.

      It should at least be stated that SPF and DKIM records can, in turn, exist in the domain's DNS or not.

    1. Data centers

      Should we not mention the possibility that someone plainly hosts a server at home? For one thing, the security of not allowing remote shells at all is unbeatable.

  5. Jul 2016
    1. All public annotations made on Hypothesis are explicitly in the public domain. See also the Hypothesis Terms of Service, https://hypothes.is/terms-of-service/. Note that Hypothesis itself is a non-profit organization.

      That seems to imply that the IETF should use hypothes.is for the service. That is just one possible annotation providers. If the experiment is successful, annotations will presumably have to be moved to an IETF server and use Annotator directly.