ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] detecting header mutations after signing

2010-10-13 11:37:30
On Tue, 12 Oct 2010 14:36:42 +0100, Hector Santos <hsantos(_at_)isdg(_dot_)net> 
wrote:

What it means for most systems that they need to change a model based
on this:

      CHECK DKIM     ---- PASS  --> ACCEPT
      CHECK RFC5322  ---- BAD   --> REJECT
      BREAK
      RESIGN
      DISTRIBUTE

To this:

      CHECK RFC5322  ---- BAD   --> REJECT
      CHECK DKIM     ---- PASS  --> ACCEPT
      BREAK
      RESIGN
      DISTRIBUTE


But full 100% RFC5322 checking is extremely tedious, and is more that we  
actually need.

What we want is more like
         CHECK DKIM && CHECK RFC5322 headers included in h= tag --> ACCEPT
where at least the CHECK RFC5322 counts the number of occurrences, perhaps  
a little more, but not worry about the more obscure checks such as LFCR  
instead of CRLF.

-- 
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131                       
   Web: http://www.cs.man.ac.uk/~chl
Email: chl(_at_)clerew(_dot_)man(_dot_)ac(_dot_)uk      Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5
_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html