[ietf-dkim] Collection of use cases for SSP requirements

[Steve Atkins]

On Nov 17, 2006, at 4:27 AM, Wietse Venema wrote:

> Hallam-Baker, Phillip:
>> FOR DKIM BASE:
>> We have three possible outcomes: Definitely Genuine, Definitely
>> Fake and Undetermined
>>
>> [We can if people think there is value further break down
>> Undetermined according to probability but bear with me]
>
> My understanding is that DKIM-base can produce only two results:
> signature verification succeeds or signature verification fails.
> I may be mistaken, but it seems to me that expanding these two
> results into >2 involves information outside DKIM-base.

While I strongly agree with this interpretation of dkim-base,
some have argued that there are three states
in dkim-base: signature verification suceeds, signature
verification fails and "no signature".

Others have tried to tie other attributes of the
mail into DKIM (is the signing domain the same as the
 From address, the Sender address, the envelope from,
the return path, the .signature etc), in an attempt to
multiply the number of signature types beyond the
one that's actually defined.

Cheers,
   Steve