What happens when public_suffix_list.dat can't be loaded?
Hi,
for the moment we are stuck with a buggy version of Python 2.7 that has recently become unable to load the URL
<https://publicsuffix.org/list/public_suffix_list.dat>
Since the end of April the attempt results in this error message:
Unable to retrieve data from https://publicsuffix.org/list/public_suffix_list.dat: <urlopen error [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:661)>
Apparently this is caused by the lack of support for SNI in that Python version (python27-2.7.13-1.ius.el5)
AFAICT the list is only needed to map domain names to corresponding Organizational Domains in the context of DMARC handling. It looks to me as if that doesn't cause any problems, but I thought I'd ask ...
Thanks, Sebastian
Sebastian Hagedorn - Listmaster - Weyertal 121 (Gebäude 133), Zimmer 2.02 Regionales Rechenzentrum (RRZK) Universität zu Köln / Cologne University - Tel. +49-221-470-89578
On 05/11/2017 07:39 AM, Sebastian Hagedorn wrote:
AFAICT the list is only needed to map domain names to corresponding Organizational Domains in the context of DMARC handling. It looks to me as if that doesn't cause any problems, but I thought I'd ask ...
Yes, that is what the list is used for. The issue that could result is if a poster is posting From: an address which is a sub-domain (e.g. some.sub.yahoo.com) and which doesn't publish a DMARC policy, but the organizational domain (yahoo.com in this case) publishes say p=reject, dmarc_moderation_action won't be applied in this case. That may or may not be an issue for any particular list depending on the addresses of the posters.
Note that you can get rid of the error log messages by putting
DMARC_ORGANIZATIONAL_DOMAIN_DATA_URL = ''
in mm_cfg.py, but the risk in that is when Python is again able to retrieve the list, you won't be getting it. Also note that the loading of organizational domain data has been made more robust for Mailman 3 including a fallback list if current data can't be loaded.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (2)
-
Mark Sapiro -
Sebastian Hagedorn