[ietf-dkim] SSP = FAILURE

[Dave Crocker]

John Levine wrote:
>> It seems to me you may be saying that a look-alike domain can be made
>> to look more authentic than the actual domain.  Is that right?  If
>> so, I'd like to understand that.
> 
> It doesn't have to look more authentic.  It only has to look as
> authentic.  With SSP, everyone can publish equally authentic "PHISH
> TARGET" notices.
> 

The list discussion seems to be spending an awful lot of time on issues 
that are theoretical, poorly understand, and lacking in a clear 
community consensus that we need a solution.

How is this productive?

d/
-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net