Community Consultation: DMARC for ARIN Mailing Lists [Archived]

OUT OF DATE?

Here in the Vault, information is published in its final form and then not changed or updated. As a result, some content, specifically links to other pages and other references, may be out-of-date or no longer available.

Posted: Tuesday, 22 August 2017

ARIN received a suggestion via the ARIN Consultation and Suggestion Process (ACSP) to add DMARC (Domain-based Message Authentication, Reporting, and Conformance) support to ARIN mailing lists. In our response to the suggestion we indicated a community consultation would be conducted by Q3 of 2017 to support our research into a possible ARIN implementation.

 [https://www.arin.net/vault/participate/acsp/suggestions/2017-11.html](/participate/community/acsp/suggestions/2017/2017-11/)

A description of DMARC is currently available inside Informational RFC 7489:
https://tools.ietf.org/html/rfc7489

Additional draft documents are also being worked on inside the DMARC Working Group of the IETF:
https://datatracker.ietf.org/wg/dmarc/documents/

The author of ACSP 2017.11 also provided reference to a Mailman support page for DMARC (note that ARIN currently uses Mailman 2):
https://wiki.list.org/DEV/DMARC

In our initial response to ACSP 2017.11, we indicated it was not at the time clear if it was possible to operate a mailing list in a manner which both meets existing community expectations for mailing list behavior and conforms to DMARC’s expectations regarding header/sender alignment. We offer the following questions to solicit your input on this topic. Provided there is support to move forward with a DMARC implementation, your feedback will be used to help inform the development of a plan that accommodates DMARC and prevents potential negative impacts to participants on ARIN mailing lists.

Should ARIN implement DMARC for ARIN mailing lists?
Do you have guidance you would like ARIN to consider when implementing DMARC for ARIN mailing lists?

Your answers to these questions, including any additional information you would like to provide, will help guide our next steps in response to ACSP 2017.11. Thank you for your participation in the ARIN Consultation and Suggestion Process. This consultation will remain open until Friday, 15 September 2017.

If you received a copy of this message from a source other than the ARIN-Consult Mailing List, you can participate in the discussion by subscribing at:
https://lists.arin.net/mailman/listinfo/arin-consult

If you have any questions, please contact us at [email protected].

Regards,

John Curran
President and CEO
American Registry for Internet Numbers (ARIN)