[ietf-dkim] Purpose and sequence for DKIM specification and deployment

[Scott Kitterman]

It's a well thought out approach.  However I see nothing in it that 
justifies delaying work on SSP.

I think there is a strong justification for not REQUIRING SSP to be 
finished to publish the base dociment.  I think there is no 
justification provided for deferring all work on SSP.

I'm not sure which you are proposing.

If you are proposing that finishing SSP not be a requirement for 
submitting the base to the standards process, then I think that makes a 
lot of sense.

If you are proposing that work in the group cease on SSP until the base 
document is submitted to the standards process (this will come as a 
surprise to no one, I'm sure), I think it's a serious mistake.

I won't attempt to rehash all the reasons why.  The short version is 
that I don't think we need better inputs to do more heuristics.  I think 
we need alternatives to heuristics.  I don't think that building a 
better whitelist justifies the effort of DKIM.


Scott Kitterman