If a mailing list signs a message and does
not change the FROM this is automatically a "3rd party" signing situation.
this is probably worth clarifying:
it is 'third party signing' if one is attempting to do an assessment based on
the From field, rather than based on the signing field.
if the signing identity is assessed directly then what matters is the
assessment
of that identity, not whether it has "permission" from the From field identity.
d/
---
Dave Crocker
Brandenburg InternetWorking
+1.408.246.8253
dcrocker a t ...
WE'VE MOVED to: www.bbiw.net