ietf-asrg
[Top] [All Lists]

Re: [Asrg] where the message originated

2009-01-12 16:16:14


Franck Martin wrote:
I have run a series of tests, where I sign a message (sent by me) but with
only the Return-path containing my domain (DKIM does not sign the return-path
as recommended in the spec).


DKIM has nothing to do with the rfc5321.MailFrom address or anything else in SMTP. It is a message-level mechanism, not transfer-level.

The dkimbase signing specification's reference to return-path cautions *against* including it as part of the signature data.

What are you referring to about "as recommended in the spec"?

d/


--

  Dave Crocker
  Brandenburg InternetWorking
  bbiw.net
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg