[Ietf-dkim] Re: Fwd: WG Action: Formed Mail Maintenance (mailmaint) / Commitment

2024-05-19 Thread Dave Crocker
On 5/10/2024 2:33 PM, Dave Crocker wrote: On 5/10/2024 10:54 AM, Murray S. Kucherawy wrote: * Prior to accepting any Standards Track document for development, there must be a commitment to implement the resulting proposed standard from at least two independent parties, as recorded on a related

[Ietf-dkim] Re: DKIM with body length

2024-05-19 Thread Jeremy Harris
On 19/05/2024 17:26, Wei Chuang wrote: then rewrite the Content-type header mime delimitter Seems like including this header in the signed set would be Best Practice? -- Cheers, Jeremy ___ Ietf-dkim mailing list -- ietf-dkim@ietf.org To unsubscribe

[Ietf-dkim] Re: DKIM with body length

2024-05-19 Thread John Levine
It appears that Dave Crocker said: >What I  am suggesting is /first/ getting a substantial base of industry >agreement, through collective action and field practice, and /then/ >codifying it with an update specification. > >The specification through the IETF would then merely document a new >e

[Ietf-dkim] Re: DKIM with body length

2024-05-19 Thread John Levine
It appears that Steve Atkins said: >> Do people really think that senders that are ignoring Sec. 8.2 of RFC 6376 >> are going to pay attention to a separate RFC >that updates that RFC? > >+1. Senders, no. Honestly, I don't know. Of the trickle of mail I see with l=, most is from the libertarian

[Ietf-dkim] Re: DKIM with body length

2024-05-19 Thread Dave Crocker
On 5/19/2024 9:26 AM, Wei Chuang wrote: Dave Crocker mentioned that there is a pathway to do a narrow update to the RFC6376 as an individual submission.  I agree that it is a good idea as hopefully a narrow update can be done relatively quickly. What I  am suggesting is /first/ getting a subs

[Ietf-dkim] Re: DKIM with body length

2024-05-19 Thread Steve Atkins
> On 19 May 2024, at 17:32, Jim Fenton wrote: > > [adding the mailmaint mailing list] > > > On 19 May 2024, at 9:26, Wei Chuang wrote: > >> Hi DKIM folks, >> As many of you know there was a DKIM security vulnerability disclosure >> Friday around the signature header body length tag "l=". >

[Ietf-dkim] Re: DKIM with body length

2024-05-19 Thread Jim Fenton
[adding the mailmaint mailing list] On 19 May 2024, at 9:26, Wei Chuang wrote: > Hi DKIM folks, > As many of you know there was a DKIM security vulnerability disclosure > Friday around the signature header body length tag "l=". The blog post is > here: https://www.zone.eu/blog/2024/05/17/bimi-an

[Ietf-dkim] DKIM with body length

2024-05-19 Thread Wei Chuang
Hi DKIM folks, As many of you know there was a DKIM security vulnerability disclosure Friday around the signature header body length tag "l=". The blog post is here: https://www.zone.eu/blog/2024/05/17/bimi-and-dmarc-cant-save-you/ The authors state that an adversary can append a malicious footer t