ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] RFC4871 5322.From Binding - Proposal to relax it.

2010-09-16 07:54:35
Since there's no such thing as a "3rd party signing policy" in DKIM or ADSP, I don't understand why we're even discussing this.

R's,
John


On Thu, 16 Sep 2010, MH Michael Hammer (5304) wrote:



-----Original Message-----
From: ietf-dkim-bounces(_at_)mipassoc(_dot_)org [mailto:ietf-dkim-
bounces(_at_)mipassoc(_dot_)org] On Behalf Of Scott Kitterman
Sent: Thursday, September 16, 2010 12:57 AM
To: ietf-dkim(_at_)mipassoc(_dot_)org
Subject: Re: [ietf-dkim] RFC4871 5322.From Binding - Proposal to relax
it.



Since anyone can generate a DKIM signature with a signing domain they
control, an unconstrained 3rd party signing policy means precisely
nothing. Without some kind of constraint (1st party only or a defined
set
of third party signers) arbitrary senders could meet the policy
requirements.

- 1.

Scott K

Make that a -2 for all the reasons Scott indicated.

Mike

_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html


Regards,
John Levine, johnl(_at_)iecc(_dot_)com, Primary Perpetrator of "The Internet for 
Dummies",
Information Superhighwayman wanna-be, http://www.johnlevine.com, ex-Mayor
Please consider the environment before sending e-mail.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html
<Prev in Thread] Current Thread [Next in Thread>