-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
In message <[email protected]>, Timo
Gerke <[email protected]> writes
> - Serialization Layer: Relying on third-party parser heuristics
> to secure a highly exposed, high-volume wire interface remains
> a structural vulnerability.
then you should write your own ...
> In high-performance/high-
> reliability (HP/HR) environments—utilizing architectures like
> the latest IBM Telum processors—unregulated JSON parsing under
> volumetric load risks blocking complete cores and breaking
> line-rate streaming.
that sort of processing power seems like complete overkill for email
(which is usually bandwidth limited), but if you have special
requirements you may need special code to address them
> - Deterministic Guardrails: To resolve these constraints, the
> specification should structurally enforce a strictly flat
> representation (hard nesting limit of d=1 or d=2). This
> ensures sequential, stream-oriented processing with a constant
> memory footprint per connection.
again ... please propose text (and you might like to also explain what
nesting you perceive to be present in the current JSON schema)
Please note that you risk constraining what recipes are allowed, so you
are going to have to make a strong case for complicating the coding of
the generation of such recipes.
> - Key Lifecycles: Infrastructure-level key rotation in the DNS
> must remain strictly separated from transaction-level
> signature validity. To preserve cryptographic deniability on
> archived data stores, the protocol layout should discourage
> lifetime validation properties from bleeding into transient
> transport metadata.
you are putting requirements on key management that (IMO) go far beyond
what it is appropriate to put into the DKIM2 spec -- and which, as I
noted before, goes completely against what other people want key
material handling to look like
You can achieve non-repudiability by signing what you put into your
datastore as you do so -- you do not need to enforce anything "on-the-
wire" to do that
- --
richard @ highwayman . com "Nothing seems the same
Still you never see the change from day to day
And no-one notices the customs slip away"
-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1
iQA/AwUBap3pj2HfC/FfW545EQJU7QCgtVBEuAsBiOQiDRUZXN1HgKBN3p8AnjoJ
EfOiwonM3ZqieHVe3k/puc3l
=LrLG
-----END PGP SIGNATURE-----
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
