I've been grappling with how to answer this one because I have to confess I
don't know much about "accreditation" systems. But "reputation" sounds to
me like good old RBL lists which I've been using for eons in my MTA. I
don't need any help from DKIM on that.
What support for assessment mechanisms is required for
the core DKIM mechanism?
It's probably wisest to support no assessment mechanism in DKIM. Let DKIM
provide the validated identity which is the all important input for
assessment but let other mechanics actually handle doing the assessing.
Anyway, (this isn't very forward thinking I admit and is probably
short-sighted), I don't today need any pointers from DKIM on how to lookup
somebody in an RBL.
What support for extensible support (and, yes, that's recursive)
of assessments is needed?
Simply refrain from saying "thou shalt not extend DKIM key records with new
tags specified in new documents in the future" into the spec. That should
do it right?
--
Arvel