Hector Santos wrote: > >> Murray wrote: >> This is completely appropriate in another way: The SDID from a valid >> signature is the only thing that DKIM "proves". > > Ok, very good. It tells you the payoff value for SDID and its ok, to say > its a mandatory identity receivers to look at. but its should be the > exclusive one highlighted.
Sorry, I read you wrong! if you said: The SDID from a valid signature is the only thing that DKIM provides for TRUST assessment. Then it is correct. But it is not the only thing that DKIM proves and trying to mandate this solve requirement on receivers is completely inappropriate. Now if we wish to be really truly DKIM complete: The AUID MAY be passed to Trust Assessors as well. The ODID MAY be used in advanced identity assessors such as Checking Signing Practices [RFC4686, RFC5595, RFC5016, RFC5617]. -- Hector Santos, CTO http://www.santronics.com http://santronics.blogspot.com _______________________________________________ NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html