ietf-dkim
[Top] [All Lists]

[ietf-dkim] Mailing lists and signatures (fwd)

2010-08-21 09:42:21
Yes, I am a nitwit, but you knew that. This time I'll tell Alpine to sign it with S/MIME.

---------- Forwarded message ----------
Date: Fri, 20 Aug 2010 23:27:05 -0400 (EDT)
From: John R. Levine <johnl(_at_)iecc(_dot_)com>
To: DKIM List <ietf-dkim(_at_)mipassoc(_dot_)org>
Subject: Mailing lists and signatures

We've had a lot of arguments about the importance of verifying the identity of contributors to mailing lists. If you think that's important, take a look at this message.

Even though Mailman has added a subject line tag and a message footer, the S/MIME signature still verifies, and your MUA should show a green star or whatever, at least once you've told it to import my S/MIME cert. Mailman automagically wrapped the multipart/signed in multipart/mixed. And the signing cert has both my full e-mail address and my True Name.

So I suggest we update the DKIM MLM draft to take out all the stuff about signatures surviving lists, and just say that if it's important for your signature to survive, S/MIME already does that, with a suitable pointer.

R's,
John

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html