Jim Fenton wrote:
> I'll stipulate that accountability may be the wrong word. However, your
> rewording doesn't pick up the concept that the domain registration may
> be fraudulent, and in that case I don't think it's properly assigning
> accountability. I was trying to convey that there is a dependency here
> that puts an upper bound (a rather low upper bound, at that) on the
> ability to identify the domain owner of a properly signed message.
>
How about the following:
DKIM's ability to identify a domain owner is [also] bounded by
whatever checks a registration authority imposes.
Eliot
_______________________________________________
ietf-dkim mailing list
http://dkim.org
