-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

In message <[email protected]
.PROD.OUTLOOK.COM>, MCN-IETF <[email protected]> writes

>With DKIM2, however, the receiver no longer sees a single signer but a 
>sequence 
>of accountable participants.
>
>For example:
>
>i=1, d=example.com (originator)
>i=2, d=list.example
>i=3, d=forwarder.example
>
>At that point, what does "DKIM aligned" mean for DMARC?

DMARCs idea is to verify the From: header field shown to the user; so
the question is really whether you expect the MUA to reconstruct the
original From: header field -- or perhaps insist that it has not been
changed as the message is transmitted

>Should alignment be satisfied if any valid signature in the chain aligns with 
>the From domain, or should the chain semantics introduce a different 
>interpretation?

You are of course asking a question about DMARC not about DKIM2 -- and
some people think that DMARC is not actually needed any more because
what it is trying to protect is protected by the chain-of-custody -- so
the only value DMARC has is the reporting features

- -- 
richard @ highwayman . com                       "Nothing seems the same
                          Still you never see the change from day to day
                                And no-one notices the customs slip away"

-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1

iQA/AwUBamoUJmHfC/FfW545EQJEqQCbBtv5ccXov3LIprWvzp9/oY2ffqsAniEq
AaPbh4M+9QZj5IrPAIAP5u0+
=yMm7
-----END PGP SIGNATURE-----

_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to