On Wed, Jun 21, 2017 at 6:19 PM, Seth Blank <[email protected]> wrote:

> On Wed, Jun 21, 2017 at 4:18 PM, Brandon Long <[email protected]> wrote:
>>
>> If you put arc=fail in an AR and then the next hop ignores and strips the
>>> AR (per spec), what good is it?
>>>
>>
>> None, but what good is the broken chain?  If all you're doing is avoiding
>> reprocessing, that seems pretty minimal.
>>
>
> A final evaluation status has merit, but it's not avoiding reprocessing,
> it's transmitting and signing your name to a definitive position that the
> chain is dead as you saw it.
>
> An ARC chain is a chain of custody, and if custody is lost, that status
> shouldn't be a hot potato - it should be committed to the chain. And then
> per the logic in the spec, no one else touches the chain after the chain is
> declared dead.
>

I think I agree here.  The absence of a "cap" on the end of the chain is
ambiguous, while a signed "cv=fail" is not.

-MSK
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to