ACSP Consultation 2017.3: DMARC for ARIN Mailing Lists

Consultation Tracking Information

  • Requested By: Staff
  • Status: Closed
  • Comments Opened: Linked to Discussion Archives: 22 August 2017
  • Comments Closed: 15 September 2017
  • Suggestion Number: n/a

Consultation Description

ARIN received a suggestion via the ARIN Consultation and Suggestion Process (ACSP) to add DMARC (Domain-based Message Authentication, Reporting, and Conformance) support to ARIN mailing lists. In our response to the suggestion we indicated a community consultation would be conducted by Q3 of 2017 to support our research into a possible ARIN implementation.

https://www.arin.net/participate/community/acsp/suggestions/2017/2017-11/

A description of DMARC is currently available inside Informational RFC 7489: https://datatracker.ietf.org/doc/rfc7489

Additional draft documents are also being worked on inside the DMARC Working Group of the IETF: https://datatracker.ietf.org/wg/dmarc/documents/

The author of ACSP 2017.11 also provided reference to a Mailman support page for DMARC (note that ARIN currently uses Mailman 2): https://wiki.list.org/DEV/DMARC

In our initial response to ACSP 2017.11, we indicated it was not at the time clear if it was possible to operate a mailing list in a manner which both meets existing community expectations for mailing list behavior and conforms to DMARC’s expectations regarding header/sender alignment. We offer the following questions to solicit your input on this topic. Provided there is support to move forward with a DMARC implementation, your feedback will be used to help inform the development of a plan that accommodates DMARC and prevents potential negative impacts to participants on ARIN mailing lists.

  1. Should ARIN implement DMARC for ARIN mailing lists?

  2. Do you have guidance you would like ARIN to consider when implementing DMARC for ARIN mailing lists?

Your answers to these questions, including any additional information you would like to provide, will help guide our next steps in response to ACSP 2017.11. Thank you for your participation in the ARIN Consultation and Suggestion Process. This consultation will remain open until Friday, 15 September 2017.

If you received a copy of this message from a source other than the ARIN-Consult Mailing List, you can participate in the discussion by subscribing at: https://lists.arin.net/mailman/listinfo/arin-consult

If you have any questions, please contact us at info@arin.net.

ARIN Actions

ARIN thanks those who provided valuable feedback during this consultation. This feedback will be used to help determine the appropriate next steps in our possible implementation of DMARC in response to a community suggestion. We will ensure any implementation we choose will not cause interruptions to those mailing list users who do not use DMARC themselves. Our implementation plan for moving forward will be communicated by Q1 of 2018.