----- Original Message -----
From: "Jon Callas" <jon(_at_)callas(_dot_)org>
To: "Damon" <deepvoice(_at_)gmail(_dot_)com>
On 24 Aug 2006, at 10:38 AM, Damon wrote:
What do we do when there is no signature and no d= domain to
work with?
This is sort of hazy in my mind.
You do anything you want to do. Perhaps more correctly, you do what
you're doing now. If there's no signature, it's not a DKIM message.
Then this is a MAJOR loophole and it causes harm to verifiers and users,
never mind to domains who did not expect this. It lowers the payoff for
verifiers to even support DKIM and get this:
"Spammers now do not need to bother with DKIM.
A zero cost do nothing technological discovery!"
If we can resolve this, the value of DKIM-BASE has been watered down
tremendously.
--
Hector Santos, Santronics Software, Inc.
http://www.santronics.com
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html