ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] Not exactly not a threat analysis

2005-08-17 11:33:26
On August 17, 2005 at 11:44, Keith Moore wrote:

IMHO, these are a useful start, but I think they need work.  For
example, the MUST NOT prohibition against verifiers using the z= field
seems a bit overstated.

The z= is not designed well, IMHO.  I'd be concerned about the 998
octet line length limit, and as DKIM defines it now, it has no,
to very little value.

I think saved header fields can have some uses, especially in
validation, but something better than the z= should be devised.

--ewh
_______________________________________________
ietf-dkim mailing list
http://dkim.org