[ietf-dkim] detecting header mutations after signing

[John R. Levine]

> A reputation service can only say that a domain is
>    BAD
>    GOOD
> or NO EVIDENCE AVAILABLE EITHER WAY.
>
> I think the last case has to be treated pretty much like GOOD, otherwise
> newcomers to the internet will never even get their messages accepted.

Heck, no.  Treat it like there's no signature at all, and filter it like 
one does now.

I hope the difference between whitelisting and filtering doesn't require 
further explanation.

Regards,
John Levine, johnl at iecc.com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. http://jl.ly