John R. Levine wrote:
>> Hi Hector,
>> At 15:20 14-05-2011, Hector Santos wrote:
>>> Shouldn't the MLM I-D say something regarding C14N and CR/LF related
>>> mutations?
>> No.
> 
> +1 to the No.
> 
> I have my reservations about the draft, but this is not one of them.

In general, I would say NO too because I don't like kludges.

My point is that the draft is already peppered with scenarios about 
how MLM can break things and it properly classifies the known simple 
"list-like" type of "alias" address expanders that in general, the 
messages is not altered.

Of course, we all know its not the only kind; a real List Server 
always provides list admin options to not alter things like the 
IETF-SMTP list seems to be been setup (with mailman?).

But here, it appears it does add a extra <CRLF> after the headers.

So my question is about whether we should provide an "informative 
implementator" insight that there may be an extra <CRLF> generated by 
non-DKIM aware list.  It can make all the difference in a valid versus 
invalid DKIM signed submission to a non-DKIM aware MLM, which BTW, I 
did add logic to my verifier to check for this extra <CRLF> when a 
BODY_HASH error first occurs and redo the hash without it.  It works! 
  But I am probably going to add a condition based on LIST-ID to 
enable this check.

I fail to see why we would not be interested in giving verifiers some 
insight into this real live scenario.

Is it because its a more general DKIM issue and ideally belongs in 
RFC4671bis (too late)?

-- 
Hector Santos, CTO
http://www.santronics.com
http://santronics.blogspot.com


_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html

Reply via email to