spf-discuss
[Top] [All Lists]

Re: Attacking Domain Keys

2004-11-29 15:00:04

On Nov 29, 2004, at 4:57 PM, Seth Goodman wrote:
That is latency as opposed to CPU cycles. RSA signature validation is a
concern from the standpoint of CPU cycles.

The whole point is that it's not. Whether you run Ecelerity or not, the fact that it has a blazingly fast DK implementation means that other MTAs can have one too. The sendmail people have also noted repeatedly in this forum that the dk-milter is a proof of concept with enormous room for optimization. Since you like to quote from the sendmail results, perhaps we should look again at their conclusion:


These tests demonstrate that the resource overhead required for this level of assurance is well within expected norms, and will prove to be far more efficient than current methods of filtering and evaluating all messages.

George


<Prev in Thread] Current Thread [Next in Thread>