[ietf-dkim] brand protection, was Is anyone using ADSP?

[Charles Lindsey]

On Wed, 14 Oct 2009 14:27:01 +0100, John R. Levine <johnl at iecc.com> wrote:

>> OK. What ADSP adds is the ability to assign reputation to a specific  
>> email
>> claiming to originate from a specific domain. Except for "unknown".
>
> No, ADSP adds the ability for senders to make unverified assertions about
> their signing practices.  Unless you already have some knowledge about  
> the
> domain, you have no idea whether it would be useful to believe it.

On the contrary, it adds the ability for domain owners to make those  
asertions. Assuming that the domain owner has control of his own DNS  
records, those assertions are as reliable as the reputation of the  
relevant Domain Registrar (you can argue about how reliable that is, if  
you wish).

-- 
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131                       
   Web: http://www.cs.man.ac.uk/~chl
Email: chl at clerew.man.ac.uk      Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5