On Thu, Jun 12, 2014 at 12:53 AM, Vlatko Salaj <[email protected]> wrote:
> > DKIM-Delegate does not need or use any externally-maintained list. > > please, solve this spoofing example: > Asked and answered already, here (and elsewhere): http://www.ietf.org/mail-archive/web/dmarc/current/msg01250.html There's no need to beat a dead horse. We're discussing what we could do about this, because we know it's a weakness with the current proposal. One good suggestion was made later in the same thread. > or am i missing something? > a whitelist, perhaps? > Is there some reason a queryable whitelist is better than an implicit (and very small) one, which is the design here? It seems like there's quite a lot of overhead in making that work. this is a common issue with any weak DKIM. > Obviously. -MSK
_______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
