ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] What are the security problems of DKIM-BASE worh addressing with policy Concepts?

2006-08-07 06:28:29
Hector Santos:
[ Charset UTF-8 unsupported, converting... ]

----- Original Message -----
From: "Mark Delany" <MarkD+dkim(_at_)yahoo-inc(_dot_)com>


It obvious that there are two relatively strong viewpoints: one the
passive that Dave describes and one the active that, amongst others, I
describe.

...

Do we try and accommodate both? If so, how?

In my opinion,  and I had asked the chair a  week or so to consider this
approach:

I also proposed a straw vote on the fundamental question:

       Do you believe there are security problems
      directly or indirectly related to DKIM-BASE  that are worth
      solving or addressing using a Sender Signer Policy concept?

None. If a message is signed by example.com, then that signature
introduces no security vulnerability, even if the message originates
from some other, unrelated, domain.

        Wietse
_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html

<Prev in Thread] Current Thread [Next in Thread>