On Tue, 11 Aug 2026, Wei Chuang wrote:
lists. I was describing the implications of a DKIM2 pass which does not
say anything about safety. Instead I was trying to say that someday a
safety validation such as DMARC, could be built using DKIM2, though that
linkage between DMARC and DKIM2 does not exist today.
I have two somewhat contradictory thoughts.
One is that if I think that changing the content of my message is bad, I
can say so, and if I don't say so, why are you second guessing me?
The other is that it's hard to think of scenarios other than security
gateways where it makes sense to change the URL in a message. In DKIM2,
just like DKIM1, just because the signatures are valid doesn't mean the
message is nice or wanted or benign. I could easily imagine a heuristic
that makes a URL change a strong spam signal.
R's,
John
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
