-----Original Message-----
From: Roy Badami
Sent: Thursday, 22 July 2004 6:51 PM
To: Terje Petersen
Cc: ietf-mxcomp(_at_)imc(_dot_)org
Subject: RE: I-D ACTION:draft-ietf-marid-submitter-02.txt
"Terje" == Terje Petersen writes:
Terje> When a SUBMITTER parameter is provided then receiving
Terje> MUAs SHOULD display the SUBMITTER parameter as the sender
Terje> of the email instead of the original FROM address in the
Terje> RFS 2822 headers; otherwise an attacker can trivially
Terje> defeat the algorithm by providing a different SUBMITTER and
Terje> FROM address.
But SUBMITTER is a parameter to an SMTP command. How would the MUA
get to see it?
-roy
~~~~~~
It would be written in the headers by the most recent MTA to receive the
e-mail.
Currently if you can send an email with no headers then the receiving
MTA will take the MAIL FROM address and add it as a FROM address in the
headers so it becomes available to the MUA. The same would be true for
the
SUBMITTER parameter which is written to the header also. All be it using
a
slightly different syntax.
MUAs already have to grovel in the headers to find the FROM address.
Making
the MUA grovel for the SUBMITTER address is not really that different.