RE: ESS-04 Comments

I agree with John on this one: the recipient should never reject a message
based solely on un-authenticated information. There are too many things
that can futzle with unauthenticated information, and almost all a user
cares about is the authenticated information. And, fortunately, it's very
clear in S/MIME which is authenticated and which isn't.


--Paul Hoffman, Director
--Internet Mail Consortium