ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] DKIM does not identify senders, and we have big semantic problems

2009-01-28 13:19:40


Suresh Ramasubramanian wrote:
If you want a signature that identifies the individual user, there's
S/MIME and PGP.

Instead of i=?  In situations described where "author of the message"
= "user" = "grandma"?


An ISP signs "on behalf of" the owner of a mailing list.  While many different 
d=/i= values could satisfy this, let's say that this particular operator 
chooses 
something like:

    d=  paying-users.this-isp.example

    i=  mailing-list-account-signon(_at_)isp(_dot_)example(_dot_)

The From: field, of course, is something like:

    From:  grandmas-mailbox(_at_)grandmas-isp(_dot_)example(_dot_)

So, how is a receiving assessment module supposed to know whether your scheme 
is 
in force or the one I've described here, or the one John uses, or the one...?

d/

-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net
_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html

<Prev in Thread] Current Thread [Next in Thread>