ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] Not exactly not a threat analysis

2005-08-14 22:35:02
On Sun, 14 Aug 2005 16:42:01 -0700, Jon Callas wrote:
 1. DKIM makes it easier to detect sender forgery.  The three important
 kinds of forgery are:

 I think I'm in violent agreement with you. I'd state it slightly differently.


I like your wording enough to suggest that we try to assess support for it 
among 
the list.  

I'm suggesting some minor changes, only to tighten it up a bit:


     There is nothing in an ordinary email message, except for the RCPT TO line
     and the IP address of the host that sent it to you, that is a reliable     
     identifier. A validated DKIM signature lets you take some reasonable subset
     of the message you received and know that it came from a designated 
source. 
     The main benefit of DKIM is that a validating agent can know where the 
     message came from. This is more reliability than email source 
     identification has ever had before. 


How do folks feel about this characterization of DKIM?


  d/
  ---
  Dave Crocker
  Brandenburg InternetWorking
  +1.408.246.8253
  dcrocker  a t ...
  WE'VE MOVED to:  www.bbiw.net



_______________________________________________
ietf-dkim mailing list
<http://dkim.org>