SPP bankofamerica.com p=strict
From: loans(_at_)bankofamerica(_dot_)com
DKIM-Signature: i=(_at_)dkim(_dot_)mit(_dot_)edu
DKIM-Signature: i=(_at_)dkim(_dot_)bankofamerica(_dot_)com
Subject: Get a great rate today!
<body munged by mit that would cause bankofamerica signature to fail>
You'd accept the message?
That depends on what I think of dkim.mit.edu. If they had a history of
sending good mail, sure. If not, probably not.
It's probably worth reminding people yet again that the point of DKIM is
to reliably tie a message to a domain, so you can use that domain's
reputation to evaluate the mail. SSP doesn't change that.
This example also reminds us that unrelated to SSP, real world filtering
can make good use of other sorts of info like realistic (i.e., not
self-published) estimates of how likely various domains are to be phish
targets.
R's,
John
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html