From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from sog-mx-4.v43.ch3.sourceforge.com ([172.29.43.194] helo=mx.sourceforge.net) by sfs-ml-2.v29.ch3.sourceforge.com with esmtp (Exim 4.76) (envelope-from ) id 1Z5tFo-00049m-NC for bitcoin-development@lists.sourceforge.net; Fri, 19 Jun 2015 10:10:32 +0000 Received-SPF: pass (sog-mx-4.v43.ch3.sourceforge.com: domain of gmail.com designates 209.85.220.54 as permitted sender) client-ip=209.85.220.54; envelope-from=wtogami@gmail.com; helo=mail-pa0-f54.google.com; Received: from mail-pa0-f54.google.com ([209.85.220.54]) by sog-mx-4.v43.ch3.sourceforge.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.76) id 1Z5tFm-000514-Vz for bitcoin-development@lists.sourceforge.net; Fri, 19 Jun 2015 10:10:32 +0000 Received: by padev16 with SMTP id ev16so82478110pad.0 for ; Fri, 19 Jun 2015 03:10:25 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.66.118.166 with SMTP id kn6mr30042982pab.93.1434708625331; Fri, 19 Jun 2015 03:10:25 -0700 (PDT) Received: by 10.70.93.72 with HTTP; Fri, 19 Jun 2015 03:10:25 -0700 (PDT) In-Reply-To: References: Date: Fri, 19 Jun 2015 00:10:25 -1000 Message-ID: From: "Warren Togami Jr." To: Mike Hearn Content-Type: multipart/alternative; boundary=e89a8ffbaba7f81a6a0518dc216d X-Spam-Score: -0.6 (/) X-Spam-Report: Spam Filtering performed by mx.sourceforge.net. See http://spamassassin.org/tag/ for more details. -1.5 SPF_CHECK_PASS SPF reports sender host as permitted sender for sender-domain 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (wtogami[at]gmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature X-Headers-End: 1Z5tFm-000514-Vz Cc: Bitcoin Dev Subject: Re: [Bitcoin-development] Mailman incompatibility with DKIM ... X-BeenThere: bitcoin-development@lists.sourceforge.net X-Mailman-Version: 2.1.9 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Jun 2015 10:10:32 -0000 --e89a8ffbaba7f81a6a0518dc216d Content-Type: text/plain; charset=UTF-8 On Thu, Jun 18, 2015 at 11:56 PM, Mike Hearn wrote: > We already removed the footer because it was incompatible with DKIM >> signing. Keeping the "[Bitcoin-dev] " prepend tag in subject is compatible >> with DKIM header signing only if the poster manually prepends it in their >> subject header. >> > > I still see footers being added to this list by SourceForge? > The new list currently has footers removed during testing. I am not pleased with the need to remove the subject tag and footer to be more compatible with DKIM users. > > >> Opinions? >> > > I've asked Jeff to not use his @bitpay.com account for now. > > I'm guessing DKIM enforcement is not very common because of issues like this? It seems that Sourceforge silently drops DKIM enforced mail like jgarzik's. LF seems to pass along their mail but mangles the header/body and makes DKIM verification fail, which causes gmail to toss it into the spam folder. I think this behavior is slightly worse than Sourceforge because it makes the poster think their message was successfully sent (it is in the archive), but many subscribers never see it due to the spam binning. I don't see any good solution to this except an auto-reject for DKIM enforced domain postings. Yes this is rather terrible, but the instant rejection is vastly better than Sourceforge silently dropping the post or LF getting stuck in spam filters. We should also auto-reject any other reason for mail getting stuck in the moderation queue like including non-subscribers. I considered auto-rejecting spam too, but that could go horribly wrong as a false From address could make the Mailman server into a spammer itself. We may have no choice but to silently drop spam for that reason. Warren --e89a8ffbaba7f81a6a0518dc216d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On T= hu, Jun 18, 2015 at 11:56 PM, Mike Hearn <mike@plan99.net> wro= te:
We already removed the footer because it was incomp= atible with DKIM signing.=C2=A0 Keeping the "[Bitcoin-dev] " prep= end tag in subject is compatible with DKIM header signing only if the poste= r manually prepends it in their subject header.

=
I still see footers being added to this list by SourceFor= ge?

The new list cu= rrently has footers removed during testing.=C2=A0 I am not pleased with the= need to remove the subject tag and footer to be more compatible with DKIM = users.
=C2=A0
=C2=A0
Opinions?

I've asked Jeff to not use his @bitpay.com account for now.<= /div>


I= 9;m guessing DKIM enforcement is not very common because of issues like thi= s?

It seems that Sourceforge silently drops DKIM e= nforced mail like jgarzik's.=C2=A0 LF seems to pass along their mail bu= t mangles the header/body and makes DKIM verification fail, which causes gm= ail to toss it into the spam folder.=C2=A0 I think this behavior is slightl= y worse than Sourceforge because it makes the poster think their message wa= s successfully sent (it is in the archive), but many subscribers never see = it due to the spam binning.

I don't see any go= od solution to this except an auto-reject for DKIM enforced domain postings= .=C2=A0 Yes this is rather terrible, but the instant rejection is vastly be= tter than Sourceforge silently dropping the post or LF getting stuck in spa= m filters.

We should also auto-reject any other re= ason for mail getting stuck in the moderation queue like including non-subs= cribers.=C2=A0 I considered auto-rejecting spam too, but that could go horr= ibly wrong as a false From address could make the Mailman server into a spa= mmer itself.=C2=A0 We may have no choice but to silently drop spam for that= reason.

Warren
--e89a8ffbaba7f81a6a0518dc216d--