ietf-asrg
[Top] [All Lists]

Re: [Asrg] 6. Proposals - DNS + PKI - Yahoo's "Domain Keys"

2003-12-08 11:47:24
On Sun, Dec 07, 2003 at 03:04:16PM -0800, Mark Baugher wrote:
At 07:26 AM 12/7/2003, Alan DeKok wrote:
<...>
 If DK means that each sender signs the message, then you have two
choices.  One is to have a domain-wide private key, in which case it
must change regularly, as spammers will quickly obtain it.

I don't know why you would assume this.

Probably because the mechanism hasn't been properly described in a
standards-track document - only as marketing material.

Also, past experience has shown that most users hate
to use cryptographic technologies for email or anything else when
they have a choice.

I would say instead that "most users hate to use technologies that
require effort".

Take SSL, which has been very widely adopted for transactions, as a
contradiction of your statement.

-- 
David Maxwell, david(_at_)vex(_dot_)net|david(_at_)maxwell(_dot_)net --> Unless 
you have a solution
when you tell them things like that, most people collapse into a gibbering, 
unthinking mass.  This is the same reason why you probably don't tell your 
boss about everything you read on BugTraq!    - Signal 11


_______________________________________________
Asrg mailing list
Asrg(_at_)ietf(_dot_)org
https://www1.ietf.org/mailman/listinfo/asrg