[ietf-dkim] draft-ietf-dkim-mailinglists-02 review

Hector Santos hsantos at isdg.net
Tue Sep 14 09:08:28 PDT 2010


MH Michael Hammer (5304) wrote:

>> John R. Levine

>> I remain unable to reconcile "this is very important" and "throw 
>> it away" applied to the same message.

> You are unable to reconcile those two because you are leaving out the
> third part of the equation. That is:
> 
> "there is a high risk of abuse for this domain when a message is not
> authenticated".

+1, which is important because for many systems, authenticated 
sessions skips many or all email security checks.  For our SMTP 
system, once authenticated, all SMTP level checks are skipped. It is 
the unsolicited unauthenticated sessions where security checks best 
applies.

-- 
Hector Santos, CTO
http://www.santronics.com
http://santronics.blogspot.com




More information about the ietf-dkim mailing list