On Sep 19, 2006, at 10:16 AM, Douglas Otis wrote:
> To avoid abusive DSNs to innocent bystanders you always need a
verified Return-Path. Minimally you've to trust that it's no
nonsense (e.g. if it came from a source where that's hopefully
guaranteed).
When the 2822.From is associated with that of the signing domain
via DKIM-MF policy, the 2821.Mail-From is assured and can be safely
used in a DSN.
Correction:
When the 2821.Mail_From is associated with that of the signing domain
via DKIM-MF policy, the 2821.Mail_From is assured and can be safely
used in a DSN.
-Doug
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html