On 11/1/2025 6:27 AM, Allen Robinson wrote:
My problem is with the first bit. Without deltas, the chain of custody is dependent on trust.


A common problem in security-related discussions in general is the requirement for complete perfection, all the time, rather than considering incremental value.  That is, getting /some/ benefits, while striving for more.

The reality of the scale and diversity of the Internet is that complete compliance by everyone all the time is rarely attainable, and pretty much never in the world of email.

So, your assessment of the limitation is correct.  Dismissing it as, therefore, being without value is not.

Having a validated chain of custody is useful, even if being able to certify what actions were taken by each entity in the chain is not.

d/

--
Dave Crocker

Brandenburg InternetWorking
bbiw.net
bluesky: @dcrocker.bsky.social
mast: @[email protected]

_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to