On Tue, Sep 8, 2026, at 17:47, Vittorio wrote: > On malware I agreed, the libraries aren't the exposure. But I still > haven't seen how a body recipe avoids carrying downstream exactly what > an antivirus gateway stripped. Antivirus usually operates at the edge, > but the same edge serves both local reception and onward relay to other > systems.
This is what the null body recipe is for. It is canonically impossible to both suppress the data the antivirus gateway stripped AND make it possible to recreate the previous message in a way that the hash of an earlier Message-Instance header will still match. The alternative, as ARC has demonstrated, is a trust-based system rather than an evidence based system. The null body recipe is just that, a way that switches from evidence based to "trust me". Bron. -- Bron Gondwana, CEO, Fastmail Pty Ltd / Fastmail US LLC [email protected]
_______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
