-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
In message <[email protected]>,
[email protected] <[email protected]> writes
>We are writing an independent DKIM2 verifier in Rust (OxiMail), against
>-06. Implementing the Chain of Custody checks, we found a gap around the
>nd= tag that lets anyone replay a signed message they merely received.
please check the (tidied up and improved) spec-07 shipped a few days
back -- there are improvements here which I suspect fix your issue. Note
also that domain matching is also more carefully specified
>Two smaller points, in case they are useful:
>- 8.1 and 11.2 disagree on whether gaps in the i= numbering are
> acceptable.
>- The error templates are written both as "PERMERROR " and as
> "PERMERROR:".
I strongly expect you will find those fixed as well
- --
richard @ highwayman . com "Nothing seems the same
Still you never see the change from day to day
And no-one notices the customs slip away"
-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1
iQA/AwUBatlNuGHfC/FfW545EQK6KQCg/ctQundgD6fmMEUIFA+cceD1FHAAniCL
WYuQwCKiMghLZkkDiu8wNSJx
=CwIf
-----END PGP SIGNATURE-----
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
