It appears that Murray S. Kucherawy <[email protected]> said: >-=-=-=-=-=- > >On Fri, Apr 18, 2025 at 10:11 AM Alessandro Vesely <[email protected]> wrote: > >> Why didn't the practice of signing by user name, as in i= >> [email protected], >> catch on? Would personal responsibility have played a role? Will it now? >> > >How would that address the replay question?
Beyond that, the assumption that the entity applying the signature can reliably identify the email address of the person or entity sending the message is wildly optimistic. On my system it can't tell and even if it could tell, as often as not the mail is coming from a system process with no e-mail address. R's, John _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
