ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] DKIM verification in MUAs

2006-04-21 11:17:28

----- Original Message -----
From: "John Levine" <johnl(_at_)iecc(_dot_)com>

2) MUST perform the verification within the "transport window",
typically 7 days.

Sorry, no, we're back to a previous argument.  If someone goes away
for two weeks, and comes back and picks up his mail, his MUA is going
to check the signatures regardless of how many MUST NOTs you try to
put in the spec.

Any MUA DKIM-Ready software using the current time is going to quickly
slammed and classified as buggy, broken software.  The authors will figure
out in their alpha 0.00a version that the top 2822.Received: timestamp from
the ISP is the proper time to use. Not the current time.  Then it wouldn't
matter how long their non-pickup stay is.

---
Hector



_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html