On 8/15/2018 12:54 PM, John R Levine wrote:
Can you explain in words the damage that cv=fail signatures will cause, and a rough idea of the cost to ARC signers and verifiers? To me the answers are none, and trivial.
You have the obligations reversed. When adding things -- which adds overhead and makes the system more complicated and increase the likelihood of bugs -- the affirmative obligation is on folk advocating the addition.
As for the fact that there are other mechanisms of limited or unknown benefit that we've had, possibly for a long time, everything about ARC is significantly more complicated, including this failure add-on.
And the add-on is of especially unclear benefit. It has intuitive appeal, which seems to get in the way of being able to clearly address actual need and benefit.
At any rate, I've expressed my concerns more than amply and don't feel the need of arguing my position further.
d/ -- Dave Crocker Brandenburg InternetWorking bbiw.net _______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
