Eliot Lear wrote:
Certainly NOT the MTA, and *even* if it does change on the SUBMIT front
who cares? That's before signing, right?
What about section 8 of RFC-4409 and all those fun little changes that
can be made? We're even covered in there in 8.5.
The "not necessarily" referred to the claim that SUBMIT is automatically
signing. Signing may be done by any component in the AdMD, including the MUA.
But if it is done by the MUA, the problem is that fully comformant SUBMIT
agents or various sorts of other conforming intermediaries can and often will
wreck the signature. And this says nothing about non-conforming intermediaries,
which aren't exactly unheard of.
If you want another example, how about RFC 4141? You're a coauthor of that one.
NOTE WELL: This list operates according to