[ietf-dkim] Can vendor's really say they have DKIM support yet?

[Bill.Oxley at cox.com]

Without a policy statement DKIM asserts that the sending MTA sent this
particular signed message. That is a benefit of itself to clearly
identify the sending party. A policy statement that is

1 I sometimes sign
2 I don't care who signs this
3 I always sign and don't want anyone else to sign

Is interesting to some, but unless the policy is number 3 is less that
useful to others  

Bill Oxley 
Messaging Engineer 
Cox Communications, Inc. 
Alpharetta GA 
404-847-6397 
bill.oxley at cox.com 

-----Original Message-----
From: ietf-dkim-bounces at mipassoc.org
[mailto:ietf-dkim-bounces at mipassoc.org] On Behalf Of Hector Santos
Sent: Wednesday, February 01, 2006 2:57 PM
To: Jeff Macdonald
Cc: ietf-dkim at mipassoc.org
Subject: Re: [ietf-dkim] Can vendor's really say they have DKIM support
yet?


----- Original Message -----
From: "Jeff Macdonald" <jmacdonald at e-dialog.com>
To: <dcrocker at bbiw.net>

> Dave,
> Thanks for the response. So just implementing
> http://mipassoc.org/dkim/specs/draft-allman-dkim-base-00-10dc.txt
> without SSP is considered a valid DKIM implementation?

For the list IETF record, If true, I believe quite strongly, with the
hat of a senior software engineer, find this highly irregular premature
promotion of an unsafe non-standard.

If Steve Atkins assertion is true and early adopters will be bulk
mailers and distributors,  just consider the impact that it will impose
of SMTP receivers who will undoubtedly find issues with guaranteed to
occur mix policy exploits with no SSP verification protection.  Systems
will take matters into their own hands, ignore it or use DKIM signed
mail against the bulk mailers thus reducing DKIM to yet another wasted
bandwidth contribution to the net.  Worst, advanced derivatives that
secure DKIM protocol will surely emerge.

In my opinion, any good actor member of the bulk mail community or DMA
will be risking their reputation and mail distribution operations with a
DKIM only concept.

--
Hector Santos, Santronics Software, Inc.
http://www.santronics.com






_______________________________________________
ietf-dkim mailing list
http://dkim.org