Create a list of domains used by Wikimedia users that have active DMARC records
Closed, DeclinedPublic
Actions

Assigned To

None

Authored By

	scfc
	Jun 11 2016, 4:25 AM

Description

For T137603, a list of domains used by Wikimedia users in their preferences that have active DMARC records is needed. To do that:

Get a list of (unique) domains used by Wikimedia users.
For each domain, get the DMARC record (dig +short txt _dmarc.yahoo.com); exclude domains that do not have a DMARC record.
Exclude domains that have a p=none tag (for example .wikimedia.org or .gmail.com).
List the remaining domains.

Ideally, this process would be done by a (maintenance) script so that it can be repeated easily.

Details

	Subject	Repo	Branch	Lines +/-
	Add script to get unique list of email domains on WMF wikis	mediawiki/extensions/WikimediaMaintenance	master	+72 -0

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Declined		None	T137603 Block Special:EmailUser for people with a DMARC-problem address
		Declined		None	T137614 Create a list of domains used by Wikimedia users that have active DMARC records

Event Timeline

scfc created this task.Jun 11 2016, 4:25 AM

Aklapper mentioned this in T146281: Certain emails not received (Yahoo/RocketMail?).Oct 2 2016, 9:12 AM

Trijnstel subscribed.Oct 9 2016, 8:33 PM

Change 320605 had a related patch set uploaded (by Reedy):
Add script to get unique list of email domains on WMF wikis

https://gerrit.wikimedia.org/r/320605

gerritbot added a project: Patch-For-Review.Nov 9 2016, 3:16 PM

Step 1 ^

Can probably be further updated to a script that does the lot

Per T66795, we no longer have this problem because we now always use Reply-To instead of From, for precisely the reasons outlined in this task.

It seems rather odd for us to both not fake sender (when the sender's domain has DMARC validation) and still pretend to be senders of insecure domains also seems... phishy to me. We should just always send on behalf of ourselves (eg. wiki@wikimedia.org) and use Reply-To.

Which, is exactly what we did last year with T66795, which resulted in wgUserEmailUseReplyTo being true by default in MediaWiki core as well as for Wikimedia Foundation wikis.

Krinkle mentioned this in T137603: Block Special:EmailUser for people with a DMARC-problem address.May 25 2018, 10:23 PM

Change 320605 abandoned by Krinkle:
Add script to get unique list of email domains on WMF wikis

Reason:
Task declined per https://phabricator.wikimedia.org/T137614#4233073