On 2/4/23 11:40 AM, Murray S. Kucherawy wrote:
On Sat, Feb 4, 2023 at 11:11 AM Michael Thomas <[email protected]> wrote:
There are architectural ramifications regardless of whether it's
mandatory or not. It would be a lot more reassuring if this were a
common and accepted practice. I don't know the answer to that. If
it's uncommon, there needs to be wider discussion imo.
What sort of ramifications?
There have been multiple cases presented in the past of good reasons
to double-sign something, if that's what you're referring to. Key
rotation comes to mind. Algorithm deprecation. With and without "i="
or "l=" for people experimenting with them.
No I'm talking about the layering violation of bindings between message
and envelope.
Mike
_______________________________________________
Ietf-dkim mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-dkim
