[ietf-dkim] suspicious and SUSPICIOUS

[Charles Lindsey]

On Wed, 03 Oct 2007 16:54:53 +0100, <Bill.Oxley at cox.com> wrote:

> I am not sure why anyone would forge a list contribution that  
> contributes or why it would matter. I just want to know that an incoming  
> email from a list is actually from that list.

It is quite common, in some of the chattier Usenet Newsgroups, for trolls  
to forge postings in the name of other regular contributors (you see it  
less in the more technical groups). And remember that Newsgroups are often  
gatewayed into mailing lists.

In the case of mailing lists such as this one, intended for serious  
technical discussions, I doubt one will ever encounter such forgeries, but  
I am sure there must be mailing lists out there established for more  
social purposes, and in which such trolls will inevitably be found.

> -----Original Message-----
> From: ietf-dkim-bounces at mipassoc.org  
> [mailto:ietf-dkim-bounces at mipassoc.org] On Behalf Of Charles Lindsey
> Sent: Wednesday, October 03, 2007 11:46 AM
> To: DKIM
> Subject: Re: [ietf-dkim] suspicious and SUSPICIOUS

> Suppose, for example, that a submission to the list has been forged in  
> the
> name of a regular contributor - so it may not be obvious that it is a
> forgery, and indeed there may be discussion on-list concerning its
> provenance. You cannot assume that list managers will necessarily be
> checking DKIM signatures.
>
> But if it is known that the regular contributor regularly signs with  
> DKIM,
> that makes it easier to spot the forgery.
>



-- 
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131                       
   Web: http://www.cs.man.ac.uk/~chl
Email: chl at clerew.man.ac.uk      Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5