スライド 1

Size: px

Start display at page:

Download "スライド 1"

きみえますはら
7 years ago
Views:

1 DMARC Technology Overview

2 DMARC dkim.jp RFC draft-dmarc-base txt p dkim.jp dkim.jp P2

3 1. DMARC DMARC Record 4. Identifier Alignment 5. ML, 6. ADSP 7. P3

4 DMARC Domain-based Message Authentication, Reporting and Conformance Sender Receiver P4

5 DKIM SPF P5

6 DKIM, SPF Sender: SPF pass Receiver: DKIM Receiver SPF DKIM Receiver DKIM, SPF Receiver Sender Receiver P6

7 3.4. Out Of Scope RFC5322.From display name From: via Bug Tracker" P7

8 false positives Sender Receiver RFC draft 3.1. High-Level Requirements P8

9 P9

10 SPF hard/softfail, DKIM ADSP DMARC AFRF AFRF draft-ietf-marfauthfailurereport-10 DMARC SPF Policy ADSP SPS SPF RFC4408 OR AND DKIM RFC6376 DKIM ATPS RFC6541 SMTP RFC5322 DNS DNSSEC P10

11 DMARC Sender/Receiver DMARC From RFC5322.From Sender 1. SPF DKIM From 4. DMARC Record DNS TXT 5. Receiver 1. SPF DKIM 2. DMARC Record P11

12 DMARC Determine Handling Policy SPF DKIM From DMARC pass the DMARC mechanism check fail the DMARC mechanism check DMARC / P12 quarantine reject or drop

13 DMARC Record From DMARC Record From: _dmarc.example.co.jp TXT v=dmarc1 ; p=none ; rf=afrf ; rua=mailto:reportdmarc@example.co.jp ; ruf=mailto:report-dmarc@example.co.jp v DMARC1 p none, quarantine, reject pct DMARC rua URI mailto:aggrep@example.com ruf Failure URI mailto:auth-reports@example.com sp none, quarantine, reject adkim DKIM r, s aspf SPF r, s P13

14 DMARC - Google Apps n&answer= P14

15 DMARC Alignment RFC5322.From SPF: spf=pass RFC5321.MailFrom DKIM: dkim=pass d= r relaxed mode : RFC5322.From s strict mode : RFC5322.From a.b.c.d.example.com example.com : P15

16 Example 1: SPF in alignment: MAIL FROM: From: Date: Fri, Feb :54: To: Subject: here's a sample Example 2: SPF in alignment parent : MAIL FROM: <sender@example.com> From: sender@child.example.com Date: Fri, Feb :54: To: receiver@example.org Subject: here's a sample Example 3: SPF not in alignment: MAIL FROM: <sender@sample.net> relax: example.com From: sender@child.example.com Date: Fri, Feb :54: To: receiver@example.org Subject: here's a sample child.example.com P16

17 Example 1: DKIM in alignment: DKIM-Signature: v=1;...; d=example.com;... From: Date: Fri, Feb :54: To: Subject: here's a sample Example 2: DKIM in alignment parent : DKIM-Signature: v=1;...; d=example.com;... From: sender@child.example.com Date: Fri, Feb :54: To: receiver@example.org Subject: here's a sample Example 3: DKIM not in alignment: DKIM-Signature: v=1;...; d=sample.net;... From: sender@child.example.com Date: Fri, Feb :54: To: receiver@example.org Subject: here's a sample relax: child.example.com example.com P17

18 SPF DKIM DMARC Record P18 SPF Alignment DKIM Alignment 1 pass pass pass pass in in Pass 3 pass --- in --- Pass pass --- in Pass --- pass --- Not in Fail DMARC mechanism check fail fail Fail fail pass --- in Pass ML pass fail Not in --- Fail ML pass pass Not in Not in Fail pass pass Not in Not in Fail fail pass Not in Not in Fail

19 DMARC mechanism check Fail 1. ML Subject in alignment From DMARC ATPS Bounce RFC5321.MailFrom SPF in alignment Submission 587port envelope From P19

20 DKIM ADSP DKIM fail SPF ADSP discardable P20

21 P21

isocjpDmarcDKIM2.pptx

isocjpDmarcDKIM2.pptx DKIM and DMARC update Sep 5 th, 2013 Takehito Aakgiri About me 赤桐壮人 (あかぎりたけひと) - 楽天株式会社 - DU ( 開発部 ) インターネットエンジニアリング推進室 - 室長 2 About me 2013? OP25B 楽天 Openwave dkim.jp 2003 ぷらら JEAG NTT