[ietf-dkim] Re: ISSUE 1521 -- Limit the application of SSP tounsigned messages

John Levine johnl at iecc.com
Thu Jan 24 11:14:31 PST 2008


>Without requiring a check (not saying what action the receiver must
>take) of the From address, what we are saying is that bad guy signature
>on evil nasty email is just as worthwhile of a signature as that of the
>owner of the domain in the From address. 

I supose that's often true, given that a signature from a random
unknown sender that matches the From: address is just as worthless as
a signature from a random unknown sender that doesn't match the From:
address.

But please stop misrepresenting other people's arguments.  Nobody has
ever claimed that a random signature gives mail a free pass.

R's,
John


More information about the ietf-dkim mailing list