On Jul 26, 2006, at 5:01 PM, Douglas Otis wrote:
On Jul 26, 2006, at 4:25 PM, Steve Atkins wrote:
On Jul 26, 2006, at 12:58 PM, Hallam-Baker, Phillip wrote:
That is not true.
I sign everything will still result in messages that have failed
sigs due to mailing lists and such.
I send nothing is much more categorical. The data can go straight
to the bit bucket
But surely if you assert "I sign everything" then any mail that is
unsigned (where "signature corrupted by mailing list" is identical
to unsigned) should go straight to the bitbucket.
No. Invalid signatures are to be ignored. In the case of a
mailing list, an invalid signature may be common for many years.
Only when there is an assertion that mail is never sent, can mail
be outright rejected, however scant.
If a sender asserts that all mail is signed, and you receive mail
purporting to be from that sender that isn't signed, are you
suggesting that it should be delivered anyway? If so, what's the
point of the sender asserting that all legitimate mail from them is
signed?
Cheers,
Steve
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html