On Thu, 24 Sep 2026, Tero Kivinen wrote:
I think most of the text changes in body are something that are suspicious. I mean if someone changes "I agree" to "I do not agree" that is modifying important things. Additions to the end of body are most likely mostly harmless, but text changes inside the body should be limited to things like removing or replacing links etc.
But that could be just as bad. What if a malevolent system rewrote a password reset link to a phish site. Or if a bank sends a message asking about a credit card charge with links for good or bad (I got one of those yesterday) and it switches the links. I can think of some heuristics, e.g., rewrites to point at proofpoint are probably OK, but I wouldn't want to try to put it in the spec.
Regards, John Levine, [email protected], Taughannock Networks, Trumansburg NY Please consider the environment before reading this e-mail. https://jl.ly _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
