ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] SSP security relies upon the visual domain appearance

2005-11-18 20:23:35
On Fri, 2005-11-18 at 09:47 -0800, Douglas Otis wrote:
On Nov 18, 2005, at 7:45 AM, Michael Thomas wrote:

 And the title of this thread is bogus.

I may have missed explaining how a binding approach removes the eye-
test.  Consider binding information has been retained for important
correspondents within a DKIM aware MUA.  When subsequent messages arrive
offering the same set of identifiers, (based upon binding assurances
such as email-address, signing-domain, and perhaps opaque-identifier,)
this message would be highlighted in some fashion.  When a look-alike
email arrives, it would not be highlighted.

At that point, the user would be alerted and could then examine the
identifiers using a fixed character-set to decide the disposition of the
message, and whether the identifiers should be included within the
profile for that entity.

-Doug

_______________________________________________
ietf-dkim mailing list
http://dkim.org

<Prev in Thread] Current Thread [Next in Thread>