Hi Rolf,

On 10/28/16 2:28 PM, Rolf E. Sonneveld wrote:

> An end user often cannot choose to sign or not to sign. The end user
> is dependent on what the ESP or the employers organization configures.
> Well, of course one could change ESP... But changing employer is quite
> a step ;-)

The question then becomes this: what is the purpose of that signature? 
How long should accountability last?  There is also the minor matter of
the operational complexity of rotating keys.

Eliot


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html

Reply via email to