Thank you for your responses. I do understand that the article may not be 100% accurate and that the mentioned vulnerabilities are already mentioned in the spec.
However I did want to highlight them here. Even though this is not widely spread (are there any stats about this?), it does seem some respectable brand use (/used) the l= parameter. Even though I have quite some experience with DKIM, this article was new to me and might also be to others. That's mainly the reason I shared it here. Met vriendelijke groet, Michiel van de Vis Software Developer eFuture B.V. Stationsplein 12-1 1211 EX Hilversum t: +31 (0)35 624 7343 e: m.vande...@efuture.nl w: www.efuture.nl <https://nl.linkedin.com/in/mvdvis> <https://twitter.com/efuturebv> On 26 October 2017 at 01:06, Dave Crocker via dmarc-discuss < dmarc-discuss@dmarc.org> wrote: > On 10/25/2017 4:00 PM, John R Levine wrote: > >> We could do that but I don't see any reason to think that the people who >> haven't read any of the other good advice would read it. >> > > I did a quick scan of the two supporting docs we did: > > RFC 5585 - DomainKeys Identified Mail (DKIM) Service Overview > > RFC 5863 - DomainKeys Identified Mail (DKIM) Development, Deployment > and Operations > > and have concluded that they are just too long for this purpose. What's > needed is something far more concise, and tightly focused on explaining the > basic benefits and limits of DKIM. I'd hazard to call it a DKIM Data > Sheet, but one that is candid. > > d/ > -- > Dave Crocker > Brandenburg InternetWorking > bbiw.net > _______________________________________________ > dmarc-discuss mailing list > dmarc-discuss@dmarc.org > http://www.dmarc.org/mailman/listinfo/dmarc-discuss > > NOTE: Participating in this list means you agree to the DMARC Note Well > terms (http://www.dmarc.org/note_well.html) >
_______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)