ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] suspicious and SUSPICIOUS

2007-10-11 11:42:48
On Wed, 03 Oct 2007 16:54:53 +0100, <Bill(_dot_)Oxley(_at_)cox(_dot_)com> wrote:

I am not sure why anyone would forge a list contribution that contributes or why it would matter. I just want to know that an incoming email from a list is actually from that list.

It is quite common, in some of the chattier Usenet Newsgroups, for trolls to forge postings in the name of other regular contributors (you see it less in the more technical groups). And remember that Newsgroups are often gatewayed into mailing lists.

In the case of mailing lists such as this one, intended for serious technical discussions, I doubt one will ever encounter such forgeries, but I am sure there must be mailing lists out there established for more social purposes, and in which such trolls will inevitably be found.

-----Original Message-----
From: ietf-dkim-bounces(_at_)mipassoc(_dot_)org [mailto:ietf-dkim-bounces(_at_)mipassoc(_dot_)org] On Behalf Of Charles Lindsey
Sent: Wednesday, October 03, 2007 11:46 AM
To: DKIM
Subject: Re: [ietf-dkim] suspicious and SUSPICIOUS

Suppose, for example, that a submission to the list has been forged in the
name of a regular contributor - so it may not be obvious that it is a
forgery, and indeed there may be discussion on-list concerning its
provenance. You cannot assume that list managers will necessarily be
checking DKIM signatures.

But if it is known that the regular contributor regularly signs with DKIM,
that makes it easier to spot the forgery.




--
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131     Web: http://www.cs.man.ac.uk/~chl
Email: chl(_at_)clerew(_dot_)man(_dot_)ac(_dot_)uk      Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5
_______________________________________________
NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html