Hello John,
the architectural objections to base64+JSON are on record in a submitted
draft (draft-moccia-dkim2-deployment-profile) - parsing cost at scale,
loss of streaming with constant memory, opacity in operational logs.
Those are design concerns, not implementation feedback.
On malware I agreed, the libraries aren't the exposure. But I still
haven't seen how a body recipe avoids carrying downstream exactly what
an antivirus gateway stripped. Antivirus usually operates at the edge,
but the same edge serves both local reception and onward relay to other
systems.
Regards,
Vittorio Moccia
Il 2026-09-07 17:40 John Levine ha scritto:
I haven't seen any other pushback about base64 JSON, notably not from
people doing
implementations. Encoding or decoding it is two nested library calls
and honestly,
if we have malware in our base64 or JSON libraries, we have way worse
problems
than DKIM2.
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
