Re: [ietf-dkim] New Issue: 4.2 needs new Attack Item: Inconsistent Signa

Hector,

Hector Santos wrote:
> Suggested correction to TA:
>
> Add a new attack item:
>
>    Inconsistent Signature vs. Policy Attacks
>          Impact: High
>          Likelihood: High
I think there's a fair enough point there all right though getting
the wording right might be tricky. In 4.1 we do have attacks like
"theft of private key", so something about "applying wrong policy"
ought be appropriate for 4.2.

Note - I don't think we should get into solutions in the threats
draft, though the considerations from Tony's mail should come back
up for discussion later.

Stephen.



_______________________________________________
ietf-dkim mailing list
http://dkim.org