ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] SSP security relies upon the visual domain appearance

2005-11-17 14:45:52

On Nov 17, 2005, at 1:02 PM, Eliot Lear wrote:

Douglas Otis wrote:
From: <my-account(_at_)my-isp(_dot_)com>, Mustang Sally 
<Sally(_at_)some-school(_dot_)edu>
Introducing similar visual confusion for list-servers the following will appear: From: IETF-DKIM No-Reply <ietf-dkim-bounces(_at_)mipassoc(_dot_)org>, Douglas Otis <dotis(_at_)mail-abuse(_dot_)org>

Yes, this is valid 2822.  I wonder what it breaks...

To start, your email client may not accept multiple from addresses. If you are sending to the list subscribed as sally(_at_)some-school(_dot_)edu, the list-server may check the wrong from address. If the first address was guest(_at_)some-hotel(_dot_)com, then subscribing this address may be problematic. Of course, the list-server application would need to add the additional from address or be unable to deliver messages with a first-party mandate. There is also the problem when someone decides to reply in handling the extra address.

Of course from a privacy standpoint, this exposes the accounts associated with each provider rather than allowing the sender to use the preferred email-address. Of course, this also exposes more email- addresses for spammer who will have no difficulty meeting whatever requirements erected.

-Doug

_______________________________________________
ietf-dkim mailing list
http://dkim.org