J D Falk wrote:
If the question you're asking is "is this signature valid?", then
the difference between no signature and a bad signature is generally
uninteresting except when debugging stuff.
That POV is reflected in the old "educational" wording.
if the question you're asking is "is this message trustworthy?",
the difference (coupled with additional info, such as ADSP and
reputation) may turn out to be extremely important.
And that's reflected in your proposal (and ID.sender-auth-header).
With Murray's results set your wording might be better, and some
folks here including me owe Hector an apology for the pushback
he got whenever he tried to talk about "bad" vs. "no" signature.
Frank
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html