Jonathan Morton <chromi(_at_)chromatix(_dot_)demon(_dot_)co(_dot_)uk> wrote:
Have we considered in our consent framework the ability to have trusted
mail that has been sent under the auspices of one person, even though
the actual source of the content is from an entirely different source?
I think we're working on the assumption that the most recent
sender/forwarder is the entity that needs to be trusted.
See RFC 2487 (SMTP + TLS). Everyone who handles the message needs
to be trusted. But you can only determine/prove trust with the person
you're currently talking to. This is a problem...
Alan DeKok.
_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg