On 5/10/10 4:55 PM, Murray S. Kucherawy wrote:
An MLM "supports DKIM" (or "is DKIM-friendly", to use some earlier language)
if it either (a) doesn't do any message modification that would generally
invalidate an author signature, or (b) re-signs mail upon re-posting it, or
(c) both (a) and (b).
This draft has not offered a reasonable solution for ADSP policy
assertions of From email addresses having valid Author Domain Signatures.
It is unreasonable to:
A) assume ADSP policies will be applied by mailing lists. (Most don't.)
B) assume mailing lists will not damage DKIM signatures. (Most do.)
Section 4.1 third paragraph states:
,--
If this is cause for concern, the originating site can consider using
a sub-domain for the "personal" mail that is different from domain(s)
used for other mail streams, so that they develop independent
reputations, and more stringent policies (including ADSP) can be
applied to the mail stream(s) that do not go through mailing lists.
'--
The protective goal underlying restrictive ADSP policies in blocking
potentially deceptive messages is not provided by this strategy. Use of
alternative domains represents a very bad practice as this leaves
recipients even more vulnerable to look-alike ploys once the practice
becomes common. No benefit is derived by not pursing a better
solution. In fact, greater harm seems likely.
-Doug
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html