On Aug 5, 2005, at 10:23 AM, Michael Thomas wrote:
william(at)elan.net wrote:
On Fri, 5 Aug 2005, Tony Finch wrote:
Its more or less up to the message signer if unique id is there
what that
unique id is common for. BTW - why do you think per-message keys
are much worse (assuming that the settings is such that results
are not to be cached)? In my view it cant be any worse then using
DNSBL and that seems to be working ok with multiple lists tested
for every received message.
I'm sorry, but I have a real hard time seeing how one can cry
about the
sky falling wrt the prospects of some domains in the future
delegating
large numbers of selectors while on the other hand saying that per-
message
lookups to the home domain from every receiver will not. At the very
least, you can't have it both ways.
This "bad-list" lookup would have a minor impact as a negative
result. This lookup would not need to be made when the HELO is
with the signature's domain. A user-key lookup would likely be
just as frequent due to DNS cache concerns. As least with the
revocation-identifier there could be a method to eliminate the
lookup in most cases. A bad identifier could be safely given a
long time to live as well.
-Doug