On Dec 11, 2007, at 10:57 AM, Hector Santos wrote:
The 'threat' that you are citing is for a signed message, which
means that there is a verifiable, accountable identity associated.
That identity will have a reputation.
What proof do you have to validates the assertion?
"That identify will have a reputation."
How is "reputation" defined and how does the generalized network
email infrastructure reach that conclusion without resorting to 3rd
party Trust Services?
A valid DKIM signature offers a fair amount of information, even
without it matching an email header.
The typical MTA can accrue a fair amount of DKIM related information
without reliance on outside services.
When a domain is being assessed, negative points can be assigned when:
o the domain is new to the receiver
o the domain name server host or IP address is new to the receiver
o the domain is known to send spam
o the domain name server host or IP address is known to publish spam
related domain names
-Doug
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html