ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] DKIM Threat Assessment v0.02 (very rough draft)

2005-08-17 14:10:51
[catching up on mail from while I was away]

domainkeys-feedbackbase02(_at_)yahoo(_dot_)com wrote:

But whatever. Regardless of how one might interpret the webmail interface, the
point I'm trying to make clear is that, as a verifier, and from a specification
perspective, Yahoo is *not* interested in, and doesn't care about, localpart.
Obviously other may be, and good for them, but Yahoo is not.
In a previous message you wrote:

The g= is an admittedly crude attempt to constrain the use of delegated keys
and is not intended to be of particular interest to a verifier above and beyond
ensuring the constraint is complied with as part of the verification rules.
Don't you need to look at the localpart to determine whether the g= constraint was complied with? If the answer is "yes, to determine if they match, but I'm not going to do anything else with localpart" than we're in agreement.

-Jim


_______________________________________________
ietf-dkim mailing list
http://dkim.org

<Prev in Thread] Current Thread [Next in Thread>