-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
In message <63758d82-0fe7-4cbc-a00b-3b18829ec68a@Spark>, william.weiner=
[email protected] writes
>With the protocol framing settled, I want to flag a gap in
>draft-herr-dkim2-bcp-
>01. Section 5.8 is currently a stub whose heading gestures at
>privacy-preserving
>behavior.
what has been discussed is the notion that a system wishes to forward a
message to a new destination without the sender learning what that
destination might be. The recipient will get the message in the normal
way but if they decide they don't want it then, since the "bounce" (the
DSN) flows back along the outgoing path the forwarder can ensure that no
evidence remains of where they sent the message to
in fact, as discussed at the interim meeting this evening, in order to
make DSN handling tractable when the outgoing path visits the same
machine more than once, stripping what happened during forward must be
removed ... also as a loose end there will be a new flag to ensure that
a system can ask that "feedback" is not sent direct from destination to
the origin of the email
>Section 6.3 leaves receiver handling of chain-less messages to local
>policy, with no guidance distinguishing intentional re-origination from chain
>evasion. As DKIM2 deployment matures and major receivers write their local
>policies, that gap is where a trust gradient against legitimate re-originators
>could quietly emerge.
"local policy" is kind of an IETF joke... it generally means there is no
policy or anything to rely upon. The system does what it feels like.
>I will be sending proposed text for both sections directly to Todd Herr and
>will
>cc this list for the record.
we work on the list, but Todd may well appreciate it being drawn to his
attention (which you can also do, shortly, within Github)
- --
richard @ highwayman . com "Nothing seems the same
Still you never see the change from day to day
And no-one notices the customs slip away"
-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1
iQA/AwUBajNER2HfC/FfW545EQLUlgCg+SaF6sd0FPdKIMBgIbKDZF1JaUoAn1FJ
DakcvcL2GwIhmQRhcLEpugjl
=uT3h
-----END PGP SIGNATURE-----
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
