On Tue, 19 Oct 2010 14:18:45 +0100, Wietse Venema <wie...@porcupine.org>  
wrote:

> My preference would be to enforce this within the existing protocol
> (that is: send h=from:from:subject:subject...),

But that only copes with some of the scams that are possible; for full  
protection you need

> ... but I could live
> with hard-coded checks for unsigned single-instance RFC 5322 and
> MIME headers (that is: no DKIM PASS for unsigned "extra" From,
> Subject, MIME-Version, Content-type, etc.  headers).

-- 
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131                       
   Web: http://www.cs.man.ac.uk/~chl
Email: ...@clerew.man.ac.uk      snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5
_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html

Reply via email to