Small addition:
On 8/27/26 12:27, Hannah Stern wrote:
[...]
However, for the verifiers that support the stronger key, spec
language seems still ambiguous:
The verifier MUST return fail only if _all_ supported signatures fail
verification, while if some fail and some pass, it lowercase-should
return a PERMFAIL (and then just below, the example error string is
specified as FAIL instead of PERMFAIL, which is inconsistent too)?
A small focused AI review of this particular aspect of the spec gave a
few additional findings:
- PERMFAIL isn't defined at all (there's FAIL or PERMERROR).
- AI quote: 'Additionally, “public keys of all the signatures ... are
needed” conflicts somewhat with the requirement to ignore algorithms the
verifier does not implement.'
(My implementation of course fetches only keys it actually needs.)
[...]
- Fix the PERMFAIL vs. FAIL inconsistency
And if deciding for PERM..., of course use PERMERROR, not the otherwise
undefined PERMFAIL. ;)
Kind regards,
Hannah.
--
Hannah Stern
Software Developer
Mail Transfer Development
1&1 Mail & Media Development & Technology GmbH | | |
Phone: +49 721 91374-4519
E-Mail: [email protected] | Web: www.mail-and-media.com www.gmx.net
www.web.de www.mail.com www.united-internet-media.de
Hauptsitz Montabaur, Amtsgericht Montabaur, HRB 5452
Geschäftsführer: Alexander Charles, Dr. Michael Hagenau, Thomas Ludwig, Dr.
Verena Patzelt
Member of United Internet
Diese E-Mail kann vertrauliche und/oder gesetzlich geschützte Informationen
enthalten. Wenn Sie nicht der bestimmungsgemäße Adressat sind oder diese E-Mail
irrtümlich erhalten haben, unterrichten Sie bitte den Absender und vernichten
Sie diese E-Mail. Anderen als dem bestimmungsgemäßen Adressaten ist untersagt,
diese E-Mail zu speichern, weiterzuleiten oder ihren Inhalt auf welche Weise
auch immer zu verwenden.
This e-mail may contain confidential and/or privileged information. If you are
not the intended recipient of this e-mail, you are hereby notified that saving,
distribution or use of the content of this e-mail in any way is prohibited. If
you have received this e-mail in error, please notify the sender and delete the
e-mail.
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
