Well, some questions...
If I understood from 3, sender MAA shall store some data from each message in order to
authenticate the message when the recipient MUA/MAA ask for it. This shall be done for a
period of probably 5 days plus some epsilon. So you shall imagine that at some moment, ALL
the messages stored in mailqueues over all internet will correspond some authentication
data stored somewhere in some MAA.
As we have some kind of variable data to be stored, maybe this may led to some possible
way to do a DoS attack if someone can fill up sender MAA capacity.
Also, as this will be a very living database, it will be difficult to assure redondance or
distribute the database or recovery when some sender MAA fails. I think this may led to
some very complex database problems to solve.
Is it realistic to limit the number of messages each one may send each day ?
Jonathan Morton wrote:
Yes, more details would be interesting. The most efficient way to
communicate those to the group would be to create a document that
details your approach.
OK. Since several of the other ASRG documents are in PDF format, I'll
take that as tacit approval of using LyX and outputting a PDF for
this. :) Something tells me that the official I-D format is a bit
too high-maintenance at this stage.
I've uploaded the initial version of the document here:
http://www.chromatix.org.uk/temp/email-authentication-00.pdf
There's a formatting problem in one place there, but that seems to be a
LaTeX bug which I'm not really awake enough to chase just now. The
meaning should be clear.
--------------------------------------------------------------
from: Jonathan "Chromatix" Morton
mail: chromi(_at_)chromatix(_dot_)demon(_dot_)co(_dot_)uk
website: http://www.chromatix.uklinux.net/
tagline: The key to knowledge is not to rely on people to teach you it.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg
--
---------------------------------------------------------------
Jose Marcio MARTINS DA CRUZ Tel. :(33) 01.40.51.93.41
Ecole des Mines de Paris http://j-chkmail.ensmp.fr
60, bd Saint Michel http://www.ensmp.fr/~martins
75272 - PARIS CEDEX 06
mailto:Jose-Marcio(_dot_)Martins(_at_)ensmp(_dot_)fr
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg