On 6/20/2020 11:53 AM, John Levine wrote:
It would be nice if you'd looked at my conditional signing drafts
before guessing (wrong) about what they say.
Here's the 2014 version:
https://datatracker.ietf.org/doc/draft-levine-may-forward/
And the improved 2018 version:
https://datatracker.ietf
On 2020-06-20 5:48 p.m., John Levine wrote:
> In article you write:
>> For example, a water tight opt-in protocol ...
>
> There's no such thing, unless you can somehow ensure that the list never
> sends anything that any of the subscribers don't expect.
Small MTAs can trust their (not anonymou
In article <63ffc5ec-f5e3-4e15-9a1f-09bf00036...@email.android.com> you write:
>Just as significantly, tbe MLM does not want to sign the same document as what
>was signed by the author. If the document is unchanged, a conditional
>signature is not needed. If tbe document is alrered after the fir
In article you write:
>For example, a water tight opt-in protocol ...
There's no such thing, unless you can somehow ensure that the list
never sends anything that any of the subscribers don't expect.
> Without that, we're back to depending on
>reputation, for which simple whitelisting suffices.
If conditional signatures require the participatuon of the author's MTA, then
the consent of the domain owner is implied. DKIM scopes already provide a
solution for delegating authority, but the MLM problem stems from not wanting
to seek domain owner involvement.
Just as significantly, tbe ML
On Sat 20/Jun/2020 02:52:55 +0200 John Levine wrote:
> On Fri, 19 Jun 2020, Murray S. Kucherawy wrote:
>
>> A number of drafts were floated, as I recall. I had a couple.
>
> There's always my conditional signing hack, in which one puts a very
> weak signature on the message which says it only co
On Fri, 19 Jun 2020, Murray S. Kucherawy wrote:
There's a chance that it is possible to specify a small range of
modifications and arrange a style of signing that could survive them.
A number of drafts were floated, as I recall. I had a couple.
There's always my conditional signing hack, in
