On 18 Aug 2004 at 13:20, [EMAIL PROTECTED] wrote:
> > This then breaks forwarding, one of the advantages of DomainKeys over
> > SPF.
>
> How so? Email forwarding works, so long as the forwarding agent (say,
> forwarder.example.com) signs the forwarded email with their DomainKey.
You haven't read the spec enough. To do this, the forwarder would have
to change the "From:" header. Although this is benign, this is a type
of forgery of the "From:" header, and forgery of the "From:" header is
what DomainKeys is supposed to stop.
--
Jeff Rife | "Damn it, I miss the sound of her voice. I tried
SPAM bait: | putting silverware down the disposal, but it
[EMAIL PROTECTED] | wasn't the same."
[EMAIL PROTECTED] |
| -- Ned Dorsey, "Ned and Stacey"
_______________________________________________
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang