In <000001c5eb17$a93a1ba0$1700a8c0(_at_)augustcellars(_dot_)local> "Jim Schaad"
<ietf(_at_)augustcellars(_dot_)com> writes:
Additionally it will include the impact
of receiving domains that are not using DKIM (**** what is an example attack
or problem????****).
I can think of several examples of where a *receiver* who doesn't use
DKIM might be impacted by the sender using DKIM. For example, the
DKIM headers are reasonably large and that might effect very low
bandwidth connections (cell phones, remote locations, etc.) Some MUAs
may barf on unknown headers, such as what DKIM creates. Some
countries and/or organizations may look at the DKIM headers, see
something that looks cryptographic and object to it.
Ok, these are just examples that I can come up with off the top of my
head. I think it is reasonable to consider more serious and/or
realistic cases.
Personally, I think the original wording in the charter is fine.
-wayne
_______________________________________________
ietf-dkim mailing list
http://dkim.org