[OpenIndiana-discuss] "Discussion list for OpenIndiana"

[Discussion list for OpenIndiana]

Looking at CookHeaders.py in 2.1.18-1, it appears that it rewrites "Joe User" <juser at yahoo.com>
as "Joe User" via Discussion list for OpenIndiana <openindiana-discuss at openindiana.org> and leaves From: alone if the domain does not implement p=reject.  That's obviously not what is being done.  Unfortunately, verifying this requires spinning up an MTA and a web server which is a lot of overhead.

The mail header suggests that we're using 2.1.14 with a local patch.  So it *might* be that just updating mailman to 2.1.18-1 would clear up most issues.  It would be very helpful if the list maintainer would comment.

Whether other mail providers follow yahoo depends on how successful the policy change is in reducing spam and spear phishing attacks.  When probably depends upon the speed with which the mailing list packages adapt to the change.  

Lots of mailing lists have subscribers who barely know how to use a computer.  I doubt that those lists will tell their users to get another mail account.  The first article I read about the change was by someone who maintained a church mailing list.  He modified From: and blogged about the issue.  That takes a bit more expertise than "get another mail account".

Reg

--------------------------------------------
On Wed, 5/14/14, Discussion list for OpenIndiana <openindiana-discuss at openindiana.org> wrote:

 Subject: Re: [OpenIndiana-discuss] "Discussion list for OpenIndiana"
 To: "Discussion list for OpenIndiana" <openindiana-discuss at openindiana.org>
 Date: Wednesday, May 14, 2014, 12:57 PM
 
 In regard to: Re:
 [OpenIndiana-discuss] "Discussion list for
 OpenIndiana",...:
 
 >
 The reason for the change is the yahoo DMARC policy change
 which results
 > in anyone using yahoo for
 mail to get bounced.  So changing it back
 > excludes anyone using yahoo from
 participating.
 
 To which
 most experts say, "Tough.  Use a different provider
 for mailing
 lists".
 
 >  Every mailing list has
 > been similarly affected.  It's just a
 matter of time before gmail and
 > others
 follow yahoo.
 
 Considering
 how badly this plays with mailing lists and how poorly it
 has been received, I'm not so certain that
 other big mailbox providers
 are going to be
 quick to do the same.
 
 Hiding the originating From: seems like a
 "cure" that's worse than the
 original problem.  There can't be *that*
 many yahoo & AOL users on this
 list;
 send them a direct message, explaining the problem, and tell
 them
 they're being dropped from the
 list, but that they're encouraged to
 rejoin the list using an email address from a
 domain that doesn't use
 p=reject for
 DMARC.
 
 Tim
 -- 
 Tim Mooney           
                              
    Tim.Mooney at ndsu.edu
 Enterprise Computing & Infrastructure   
               701-231-1076 (Voice)
 Room 242-J6, Quentin Burdick Building     
             701-231-8541 (Fax)
 North
 Dakota State University, Fargo, ND 58105-5164
 
 _______________________________________________
 openindiana-discuss mailing list
 openindiana-discuss at openindiana.org
 http://openindiana.org/mailman/listinfo/openindiana-discuss