Re: [precis] IDNA and Multilingual Internet issues and vocabulary after IDNA2008

2011-08-20 Thread Hector Santos
. Portzamparc BTW I am not French, I am Breton! ___ Ietf mailing list i...@ietf.org https://www.ietf.org/mailman/listinfo/ietf -- Sincerely Hector Santos http://www.santronics.com

Re: Last Call: draft-housley-two-maturity-levels-08.txt (Reducing the Standards Track to Two Maturity Levels) to BCP

2011-08-14 Thread Hector Santos
expertise and scrutiny requirements for reviewers. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

Re: subject_prefix on IETF Discuss?

2011-08-13 Thread Hector Santos
IETF Methods for offline users to achieve this - IMAP, NNTP and LIST-ID sorting, and a new DKIM standard that this kludge conflicts with. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf

Re: Subject prefixes

2011-08-13 Thread Hector Santos
, and it would be unfortunate - nay, negligent - to make a decision on the matter without due discussion, debate and documentation. Nick ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf -- Hector Santos, CTO http

Re: subject_prefix on IETF Discuss?

2011-08-12 Thread Hector Santos
membership database, it can do customize payload per member. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

Re: The fallacy of perfection (Re: DKIM Signatures now being applied to IETF Email)

2011-08-10 Thread Hector Santos
support issues. :) I said more than I wanted to, but its just my opinion. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

Re: Last Call: draft-housley-two-maturity-levels-08.txt (Reducing the Standards Track to Two Maturity Levels) to BCP

2011-08-08 Thread Hector Santos
SM wrote: This is not an exercise we should have to go through. Engineers must have complete faith in implementation reports. Faith-based engineering and reality are mutually exclusive. :-) Touche! -- Hector Santos, CTO http://www.santronics.com

Re: Last Call: draft-housley-two-maturity-levels-08.txt (Reducing the Standards Track to Two Maturity Levels) to BCP

2011-08-07 Thread Hector Santos
. Engineers must have complete faith in implementation reports. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

Re: Last Call: draft-housley-two-maturity-levels-08.txt (Reducing the Standards Track to Two Maturity Levels) to BCP

2011-08-05 Thread Hector Santos
of word-smithing to make corrections. Again, if you wish, I can give you an example off-list to see why questions like these can help. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org

Re: I-D Working groups and mailing list

2011-08-04 Thread Hector Santos
?) submission. But then again, I can imagine some that don't wish to expose this for whatever reason, perhaps to keep the team light (and private) until they feel its ready public work - or not. -- Hector Santos, CTO http://www.santronics.com Dave CROCKER wrote: On 8/4/2011 7:11 AM, Worley, Dale R

Re: I-D Working groups and mailing list

2011-08-04 Thread Hector Santos
. Those who thinks it benefits readers will add the info when possible. Those who don't, well, won't. Not a big deal. Murray S. Kucherawy wrote: -Original Message- From: ietf-boun...@ietf.org [mailto:ietf-boun...@ietf.org] On Behalf Of Hector Santos Sent: Thursday, August 04, 2011 8:10

Re: DKIM Signatures now being applied to IETF Email

2011-08-03 Thread Hector Santos
. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

Re: Last Call: draft-housley-two-maturity-levels-08.txt (Reducing the Standards Track to Two Maturity Levels) to BCP

2011-08-03 Thread Hector Santos
, if anything, if we are going to allow for faster maturity, we probably need some guidelines (if not already in place) in how non-WG RFC productions could influence a current WG. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com Russ Housley wrote: SM: From Section

Re: subject_prefix on IETF Discuss?

2011-08-03 Thread Hector Santos
interoperability issues with submission downlinks (members) with DKIM security support. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

Re: Last Call: draft-housley-two-maturity-levels-08.txt (Reducing the Standards Track to Two Maturity Levels) to BCP

2011-08-03 Thread Hector Santos
an exceptional experience and not the norm. But I believe a watchdog for these type of possibilities will help. -- Hector Santos, CTO http://www.santronics.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

I-D Working groups and mailing list

2011-08-03 Thread Hector Santos
this useful information, but most do not. Its one the first things I look for. I was going to suggest the same for an RFC, but it could be the WG was closed down by this time. Just a thought if it makes sense. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: DKIM Signatures now being applied to IETF Email

2011-08-02 Thread Hector Santos
is that? Is the question this? Do author domains have any say on who signs for them and who/what is considered unauthorized signatures versus authorized resigning? Anyway, thanks for your comments. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: DKIM Signatures now being applied to IETF Email

2011-08-02 Thread Hector Santos
, when in fact, it is still today a WG charter item. Very odd. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com DRAFT IETF WORKING GROUP CHARTER 14 Oct 2005 Domain Keys Identified Message (DKIM) CHAIRS: TBD AREA DIRECTORS: Russell Housley, Sam

Re: DKIM Signatures now being applied to IETF Email

2011-08-01 Thread Hector Santos
allowed the anonymous abuse of these domains to continue. The issue is straight forward, either resigners support signing controls or not. Obviously the latter was the easy way for THEM but it didn't solve the problem. No matter way a policy concept is required. -- Hector Santos, CTO http

Re: DKIM Signatures now being applied to IETF Email

2011-07-31 Thread Hector Santos
. ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

Re: [ietf-dkim] Doublefrom, ADSP and mailing lists in perspective,

2011-07-30 Thread Hector Santos
to create an IETF no consensus. Hey, I'm all for proving me wrong. Please do so. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list

Re: [ietf-dkim] Doublefrom, ADSP and mailing lists in perspective,

2011-07-30 Thread Hector Santos
outliving the Space Shuttle program. Mark. ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: DKIM Signatures now being applied to IETF Email

2011-07-30 Thread Hector Santos
then, most people in our market don't understand what utility it offers them. At present, they believe the new badge will help them look better, but there is no real evidence that it does anything for them. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: DKIM Signatures now being applied to IETF Email

2011-07-29 Thread Hector Santos
. DKIM is a protocol that requires Batteries in order to work and everyone must use the same batteries. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman

Re: [ietf-dkim] Doublefrom, ADSP and mailing lists in perspective,

2011-07-28 Thread Hector Santos
mail pickups. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com Michael Deutschmann wrote: On Wed, 27 Jul 2011, Douglas Otis wrote: Your fix will not control phishing or spoofing abuse and would expose these domains to open-ended sources. ADSP reforms along my

Re: [ietf-dkim] Doublefrom, ADSP and mailing lists in perspective,

2011-07-28 Thread Hector Santos
policy layer. +1. But 5+ years WIP? :) It wasn't rocket science. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: DKIM Signatures now being applied to IETF Email

2011-07-25 Thread Hector Santos
, please feel free to contact me, or submit to ietf-action. Thank you, Glen Glen Barney IT Director AMS (IETF Secretariat) ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf -- Hector Santos, CTO http://www.santronics.com

Re: DKIM Signatures now being applied to IETF Email

2011-07-25 Thread Hector Santos
also is authorized IETF.ORG as a valid 3rd party signer for the ISDG.NET domain. This is done by adding ADSP/ATPS record using this wizard: http://www.winserver.com/public/wcadsp/wcadsp.wct Hector Santos wrote: Cool beans. Message as verified here. The good thing is that it finally

Re: [ietf-dkim] Draft on email transition to IPv6 from IPv4 for sevice providers and other communities

2011-07-24 Thread Hector Santos
. Are you anticipating a larger number of new SMTP clients as a consequence of IPV6? Mark. ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html -- Hector Santos, CTO http://www.santronics.com http

Re: [hybi] Last Call: draft-ietf-hybi-thewebsocketprotocol-10.txt (The WebSocket protocol) to Proposed Standard

2011-07-24 Thread Hector Santos
the better. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf

Re: Repetitions and consensus

2011-07-13 Thread Hector Santos
it doesn't do that.) and move on. ___ Ietf mailing list Ietf@ietf.org https://www.ietf.org/mailman/listinfo/ietf -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ Ietf

Re: Confidentiality notices on email messages

2011-07-12 Thread Hector Santos
of a hard ass is his boss, employer or their chief counsel. You might find if the IETF is making a fuss, they may ask the employee to just not participate - lurk, but don't post. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: [ietf-dkim] Doublefrom language should be in ADSP, not core

2011-07-10 Thread Hector Santos
it. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] Doublefrom language should be in ADSP, not core

2011-07-10 Thread Hector Santos
Deutschmann wrote: On Sun, 10 Jul 2011, Hector Santos wrote: Now of course, if ADSP was a standard and whitehouse.com had an exclusive signing policy, receivers would of rejected the junk distributed by Dave's list server as an ADSP violation. But ADSP is a pipe dream. The attack only

Re: [ietf-dkim] Final update to 4871bis for working group review

2011-07-10 Thread Hector Santos
main concern is that malicious signers and malicious intermediaries are both recognized (or if not that neither is explicitly mentioned). IMHO is is the malicious signers that are more insidious, since the 'h=from:from:' offers no protection against them. -- Hector Santos, CTO http

[ietf-dkim] Issue: 6.1 treatment of bad signature

2011-07-10 Thread Hector Santos
valid signature requirement as outlined in section 6.0, a verifier SHOULD NOT treat a message that has one or more bad signatures and no good signatures differently from a message with no signature at all. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

[ietf-dkim] One From DKIM Rule

2011-07-08 Thread Hector Santos
and verifiers, which includes receivers or internal mail creators don't allow multiple from headers. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org

Re: [ietf-dkim] Final update to 4871bis for working group review

2011-07-07 Thread Hector Santos
a ONE FROM RULE criteria for both signing and verifying. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] Final update to 4871bis for working group review

2011-07-06 Thread Hector Santos
in transit. This is done by having the signer list the field name(s) in the h= tag an extra time [...etc...] Barry, as participant ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html -- Hector Santos, CTO

Re: [ietf-dkim] Final update to 4871bis for working group review

2011-07-06 Thread Hector Santos
the t's in their integration. If they have software control of their DKIM stuff, its probably a good idea to make their the Verifier and Signer has a One From DKIM Rule concept as cited in my previous post and the specs should make that very clear. -- Hector Santos, CTO http://www.santronics.com

[ietf-dkim] Duplicate Signatures in a distribution with same payload

2011-07-06 Thread Hector Santos
is correct, including time wise, given the fact the payload is 100% exact? Just wondering how much time I should spent on what appears to be one of the final considerations for our new revision of DKIM implementation. Thanks -- Hector Santos, CTO http://www.santronics.com http

Re: [ietf-dkim] Final update to 4871bis for working group review

2011-07-03 Thread Hector Santos
can use the official completion announcement as part of our marketing. PS: We resolved the overhead issues with DKIM signing so we are now ready to go. :) -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com Barry Leiba wrote: The 4871bis draft was on this past

Re: one data point regarding native IPv6 support

2011-06-09 Thread Hector Santos
, but there are many software vendors, free, commercial or otherwise that need to change their software across the board; SMTP, FTP, NNTP, IMAP, POP3 etc. The bottom line: unless I am force to support IPv6, stack or no stack, the investment required isn't going to happen soon. -- Hector Santos

Re: [ietf-dkim] New canonicalizations

2011-05-30 Thread Hector Santos
, as a highlighted signer recommendation targeting list mail. But as the table above shows, without the CRLF fix it doesn't matter. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http

[ietf-dkim] DKIMnomics

2011-05-28 Thread Hector Santos
Alessandro Vesely wrote: On 25/May/11 20:23, Dave CROCKER wrote: That's not likely to be the goal of this sort of exercise. Rather, it will be to choose a set of particular types of breakage, ignoring others. For an effort like that, it is not meaningful to come up with additional types

Re: [ietf-dkim] MLMs and signatures again

2011-05-27 Thread Hector Santos
to. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] MLMs and signatures again

2011-05-27 Thread Hector Santos
fail and none/fail as far as catching badness with very little impact on legitimate mail. What sort of phishing are we talking about? Identities or the context? -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: [ietf-dkim] MLMs and signatures again

2011-05-27 Thread Hector Santos
Hector Santos wrote: John R. Levine wrote: These days most subscriptions are entered on a web page, and if you're lucky the mailer will send a confirmation message with a URL that sends the subscriber back to the web page. Where's the MTA going to get the subscriber info? See below

Re: [ietf-dkim] New canonicalizations

2011-05-27 Thread Hector Santos
), is a very important factor in all this. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] MLMs and signatures again

2011-05-27 Thread Hector Santos
Hector Santos wrote: MH Michael Hammer (5304) wrote: Remember, it's not static, it's dynamic. What was a non-phished domain yesterday could be a phished domain today or tomorrow. DKIM isn't a magic bullet, it's one more tool in the toolbox. I've found that in combination with SPF it works

Re: [ietf-dkim] New canonicalizations

2011-05-26 Thread Hector Santos
, people software (Old and New) need to change to make DKIM work better. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] DKIM Scouts, was 8bit downgrades

2011-05-26 Thread Hector Santos
Submission Integrity because it doesn't matter any more when the MLM is always (re)signing. Anyway, IMV, what people need is insights and let them make their own decisions based on their own needs, but overall, the same outcome in all cases should be the intended goal. -- Hector Santos, CTO http

Re: [ietf-dkim] DKIM Scouts, was 8bit downgrades

2011-05-26 Thread Hector Santos
Ian Eiloart wrote: On 26 May 2011, at 12:46, Hector Santos wrote: In principle, passthru mail should not be tampered, but MLM list mail are the industry accepted exception to this non-tampering tradition and today (at least in the USA), it is CAN-SPAM legal requirement to have a viewable

Re: [ietf-dkim] DKIM Scouts, was 8bit downgrades

2011-05-26 Thread Hector Santos
the responsibility of the originating domain, copyright holder author mail. The Broken Signature Resign solution is only one solution. It doesn't cover all the problems for one reason only - you can't assume everyone is going to resign yet alone add DKIM to their software. -- Hector Santos

Re: [ietf-dkim] MLMs and signatures again

2011-05-26 Thread Hector Santos
, then this tends to be true. But when not, when the list or any group forum is anonymous in nature, history has told us its get corrupted with junk and most people tend to dislike it. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: [ietf-dkim] MLMs and signatures again

2011-05-26 Thread Hector Santos
Steve Atkins wrote: On May 26, 2011, at 1:50 PM, Hector Santos wrote: If by traditional, you mean the members are vetted with subscription and confirmation, then this tends to be true. But when not, when the list or any group forum is anonymous in nature, history has told us its get

Re: [ietf-dkim] MLMs and signatures again

2011-05-26 Thread Hector Santos
subscription. I guess if the RECEIVER is a List Server SMTP Server, then its database will be easily accessible to do a member check at SMTP level. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list

Re: [ietf-dkim] MLMs and signatures again

2011-05-26 Thread Hector Santos
and/or operators add Plug and Play hooks, to do the Always Resign thing you want, we will always have the problems for a very long time. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com John R. Levine wrote: Perhaps an MLM's reputation is pulled up or down as the average

Re: [ietf-dkim] MLMs and signatures again

2011-05-26 Thread Hector Santos
can see where this be a good idea to do now - SMTP level rejects with response text User not member of so and so list. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http

Re: [ietf-dkim] MLMs and signatures again

2011-05-26 Thread Hector Santos
in life. In any case, we are not doing any REJECT/PASS handling based on DKIM yet, but I am going to try turning off SPF for my domains and see if I get the expected 100% would-be rejects based on DKIM and my ADSP policies. -- Hector Santos, CTO http://www.santronics.com http

Re: [ietf-dkim] MLMs and signatures again

2011-05-26 Thread Hector Santos
. Before that, it was in the 1-4% range. So if most of the 6% SPF rejects are spoof attempts on our domains, then I have no reason to believe that DKIM plus our ADSP/ATPS/ASL policies would not yield the same result. Hector Santos wrote: MH Michael Hammer (5304) wrote: The other piece

Re: [ietf-dkim] MLMs and signatures again

2011-05-26 Thread Hector Santos
have from a pre-filter standpoint. If most of it is pre-filtered, then extracting the various value of DKIM is masked or lost. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according

Re: [ietf-dkim] New canonicalizations

2011-05-25 Thread Hector Santos
of any empty header file of size 2, crlf) - Intermediaries that expand QP to 8 bit - Intermediaries that reformat to BASE64 I personally have not seen anything else. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: [ietf-dkim] New canonicalizations

2011-05-25 Thread Hector Santos
Alessandro Vesely wrote: On 25/May/11 10:03, Hector Santos wrote: How would 7/8 bit be considered? Personally, the STRIP C14N idea would work just fine by removing all trailing WSP (CR, LF, SP) and for QP text, decode it first. I'm considering updating my 2006 I-D to include the QP

Re: [ietf-dkim] New canonicalizations

2011-05-25 Thread Hector Santos
beta code, revamped to support I/O completion ports and the code for undotting of the leading dot (per RFC5321 4.5.2) fell thru the crack. So we can nix this one. :) -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: [ietf-dkim] 8bit downgrades

2011-05-25 Thread Hector Santos
% failure NEW: 4.8% failure and the major contributor to this is that I have no more facebookmail.com failures! When I remove the domains I know, the rest is pretty much spam. :) Hector Santos wrote: Alessandro Vesely wrote: For example, MTAs that autoconvert from quoted-printable to 8bit

Re: [ietf-dkim] 8bit downgrades

2011-05-25 Thread Hector Santos
Scott Kitterman wrote: On Wednesday, May 25, 2011 02:04:45 PM Hector Santos wrote: ... When I remove the domains I know, the rest is pretty much spam. ... Isn't that pretty generally true, DKIM or no DKIM. Sure, in general I would agree with that and most of it are single shot deals

Re: [ietf-dkim] DKIM Scouts, was 8bit downgrades

2011-05-25 Thread Hector Santos
icon attachment, the message display is blank. That may be related to what you are talking about. In any case, its all fubar. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according

[ietf-dkim] Perfect Solution (FDS), was dot-forward, was 8bit downgrades

2011-05-24 Thread Hector Santos
://jl.ly ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list

Re: [ietf-dkim] 8bit downgrades

2011-05-24 Thread Hector Santos
Ian Eiloart wrote: On 23 May 2011, at 17:10, Hector Santos wrote: Rhetorically, why not? Put another way, why should a receiver tolerate failure, or better, why should DKIM itself - the technology - tolerate failure? Sounds like DKIM has some inner soul turmoils - a devil on one

Re: [ietf-dkim] 8bit downgrades

2011-05-24 Thread Hector Santos
. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

[ietf-dkim] DKIM Scouts, was 8bit downgrades

2011-05-24 Thread Hector Santos
:) -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] DKIM Scouts, was 8bit downgrades

2011-05-24 Thread Hector Santos
better, there were less issues, less surprises and future things would basically fit right in. With new needs such as EAI (internalization) and DKIM (authentication), it is highlighting the cases where certain methods in the network were not ideal. -- Hector Santos, CTO http://www.santronics.com

Re: [ietf-dkim] DKIM Scouts, was 8bit downgrades

2011-05-24 Thread Hector Santos
___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates

Re: [ietf-dkim] DKIM Scouts, was 8bit downgrades

2011-05-24 Thread Hector Santos
. Not in Thunderbird V2.0, V3.1. It knows nothings about your signature - Click View | Message Security Info and it says: Message Has No Digital Signature Message Not Encrypted What version of TBird did you use? -- Sincerely Hector Santos http://www.santronics.com

Re: [ietf-dkim] New canonicalizations

2011-05-23 Thread Hector Santos
Charles Lindsey wrote: On Mon, 23 May 2011 03:50:06 +0100, Hector Santos hsan...@isdg.net wrote: It would of been nice to have some DKIM-Signature flag that might indicate the Content-Transfer-Encoding, i.e.: et=base64 --- copy of the top level Content-Transfer-Encoding Could you

Re: [ietf-dkim] 8bit downgrades

2011-05-23 Thread Hector Santos
Ian Eiloart wrote: On 20 May 2011, at 05:24, Hector Santos wrote: In this case, if this is enforced with a MUST, for a system that is not 8BITMIME ready but is adding DKIM signing support, to remain compliant it is far more feasible to add a rule to a DKIM signing component: If mail

Re: [ietf-dkim] New canonicalizations

2011-05-23 Thread Hector Santos
that are guarantee to change based on a known path it will take - like for an MKM, consider not hashing the 5322.Subject tag and use l= when the target path is known to be a list adding a footer. So with the Pareto Chart, we can include MLM and target/path as two of the items. -- Hector Santos, CTO http

Re: [ietf-dkim] 8bit downgrades

2011-05-23 Thread Hector Santos
Ian Eiloart wrote: On 23 May 2011, at 15:19, Hector Santos wrote: But why skip? Usually the message won't be downgraded. And even if they are, usually a broken signature will cause no harm. Thats the problem - define usually and also define no harm. Well, harm will only be done when

Re: [ietf-dkim] 8bit downgrades

2011-05-23 Thread Hector Santos
Alessandro Vesely wrote: On 23/May/11 06:35, Hector Santos wrote: Alessandro Vesely wrote: For example, MTAs that autoconvert from quoted-printable to 8bit, a rather common circumstance. I did the following Content-Transfer-Encoding failure analysis: Failure rates for message top

Re: [ietf-dkim] Last Call: draft-ietf-dkim-mailinglists-10.txt (DKIM And Mailing Lists) to BCP

2011-05-23 Thread Hector Santos
! -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] 8bit downgrades

2011-05-23 Thread Hector Santos
. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] Last Call: draft-ietf-dkim-mailinglists-10.txt (DKIM And Mailing Lists) to BCP

2011-05-23 Thread Hector Santos
) to mind their own bee's wax if they see an unexpected, unsolicited, unknown, unauthorized non-first party DKIM signed mail when the author domain may have a policy that says Thats a NO NO Dave, you got receivers all twisted up in knots! -- Hector Santos, CTO http://www.santronics.com http

Re: [ietf-dkim] 8bit downgrades

2011-05-22 Thread Hector Santos
. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] 8bit downgrades

2011-05-22 Thread Hector Santos
but it could be done with downlink target/path knowledge: if mail is 8bit then if target path does destroy 8bit then convert sign mail While that may be a functional description of a fallback, we don't have the automated technical capability to define it reliably. -- Hector

Re: [ietf-dkim] 8bit downgrades

2011-05-22 Thread Hector Santos
Murray S. Kucherawy wrote: Hector Santos followed up Crocker'ss passing of the buck: Please refrain from passing the buck to the WG. The document editors are: D. Crocker (editor) Tony Hansen (editor) M. Kucherawy (editor) If the WG was technically incapable as you

Re: [ietf-dkim] New canonicalizations

2011-05-22 Thread Hector Santos
so, but if l= was used, there is some avenue for success. The main realization is that Sender/Signers need to be more aware of the target/path if they desire a higher rate of return. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: [ietf-dkim] Certifying the DKIM public key?

2011-05-22 Thread Hector Santos
and signers. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] 8bit downgrades

2011-05-22 Thread Hector Santos
a list. It would be interesting to see what Murray can show for his volume collection. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list

[ietf-dkim] DKIM Requirements Summary

2011-05-20 Thread Hector Santos
an asciiz String? 3. Section is confusing, mixes up sections (i.e. previous steps ... what steps?) 4. There is no explicit statement for a signer MUST implement simple or relaxed, unlike explicit MUST statements for verifier. 5. Should this say invalid signature? 6. Ambiguous? -- Hector

Re: [ietf-dkim] New canonicalizations

2011-05-19 Thread Hector Santos
trust? If the signer is unknown, DKIM authenticity has no value. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] 8bit downgrades

2011-05-19 Thread Hector Santos
for DKIM verification failures If we change this downgrade to a MUST, then we must also fix the C14N problem we forgot about the extra CRLF possible at the top the message possible in IETF streams like IETF-SMTP. Can't have it both ways: its important here, but not there. -- Hector Santos, CTO

Re: [ietf-dkim] 8bit downgrades

2011-05-19 Thread Hector Santos
be converted to 7-bit MIME by an MUA or MSA prior to presentation to the DKIM So I don't even know why we are talking about this. If its out of scope how we can contemplate a MUST here. I concur with Levine, take it out. -- Hector Santos, CTO http://www.santronics.com http

Re: [ietf-dkim] 8bit downgrades

2011-05-19 Thread Hector Santos
Pete Resnick wrote: On 5/19/11 6:52 PM, Hector Santos wrote: SHOULD is an optional requirement - Its a recommendation for the better, but things will not break things for your peers if you don't follow it. You may be shamed but the person shaming you is the one wrong if they depended

Re: [ietf-dkim] New canonicalizations

2011-05-18 Thread Hector Santos
canonicalizations. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] Section 3.7 s/content-hash/body-hash/?

2011-05-18 Thread Hector Santos
-param but without the b-param (data hash) -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

Re: [ietf-dkim] New canonicalizations

2011-05-18 Thread Hector Santos
to be statistically true, then I think the only thing we can say is that we did our job to provide a relaxed C14N method to lower the transport mutations issues for those domains who need it. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com

Re: [ietf-dkim] New canonicalizations

2011-05-18 Thread Hector Santos
rates for simple or relaxed). I also think that if DKIM has a C14N option (i.e. STRIP) available to resolve legacy throughputs for particular streams, they will use it too maybe on per target basis only. :) Anyway, thanks. -- Hector Santos, CTO http://www.santronics.com http

Re: [dkim-ops] FW: how can use the DKIM the function

2011-05-17 Thread Hector Santos
exception trap for log_write(), you need to look at every place it is used and make sure there is no threat entry point with buffer overflow exploit potentials. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ dkim-ops

Re: [ietf-dkim] New canonicalizations

2011-05-17 Thread Hector Santos
relaxed/relaxed. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com ___ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html

<    2   3   4   5   6   7   8   9   10   11   >