[ietf-dkim] ISSUE: non-ascii header text

Douglas Otis dotis at mail-abuse.org
Thu Apr 21 10:57:24 PDT 2011


On 4/21/11 5:25 AM, John R. Levine wrote:
>> Use of A-labels within header fields supporting UTF-8 is a bad idea.
> Since DKIM is defined on RFC 5322 messages, and 5322 is ASCII-only, no 
> header fields in a compliant message can contain UTF-8.  I don't know 
> why you keep repeating this uttetly wrong stuff, but please stop now.
http://tools.ietf.org/html/draft-ietf-eai-rfc5336bis-09

While the majority of users within your borough may not care, a large 
population within Asia and elsewhere do.  In fact, much of their email 
already violates RFC5322's ASCII-only requirements.  This limitation 
will change very soon.  Setting DKIM on a sustainable track must deal 
with this natural evolution, despite those saying please stop.  You are 
a good and intelligent person that deserves a great deal of respect.
>> Changing a reference of RFC3490 to RFC5890 already represents an 
>> incompatible change.
> Your assertion is noted.
The desire is not to increase anyone's workload, but the reasons for 
developing DKIM will become even more apparent during the introduction 
of UTF-8.  Unfortunately, the current DKIM specifications ignore 
important aspects about where A-Labels are to exist within a protocol.  
A-Labels are NOT intended for human consumption.   DKIM also failed to 
ensure resources are only obtained at valid A-Labels or NR-LDH defined 
locations.  A significant security flaw, especially when definitions of 
valid A-Labels has significantly changed for the better.

-Doug




More information about the ietf-dkim mailing list