[ietf-dkim] SSP is the Sender Signing Practices, not the Sender's accreditation

[wayne]

In <Pine.BSI.4.56.0611091216380.2782 at tom.iecc.com> "John R Levine" <johnl at iecc.com> writes:

>> DKIM, with or without SSP, does not solve the phishing problem, nor
>> the spam problem.  DKIM, in conjunction with one or more reputation
>> systems, may help here, but this has little to do with SSP.
>
> Right.  So we agree that we have yet to show any plausible reason that SSP
> would be of use to receivers.

No, I don't agree at all, I never said that and I don't like you
putting words into my mouth.

A tool does not have to completely solve a problem in order for it to
be useful.  DKIM and SSP help solve domain forgery problems.  This is
a problem made worse by spam and phishing.  DKIM, by it self, seems to
only really solve the "who can I blame for sending/relaying this
spam?" problem, something which is already fairly well solved.
Without SSP, I really don't see any use in DKIM at all.


-wayne