On 18 Aug 2004 at 13:20, [EMAIL PROTECTED] wrote: > > This then breaks forwarding, one of the advantages of DomainKeys over > > SPF. > > How so? Email forwarding works, so long as the forwarding agent (say, > forwarder.example.com) signs the forwarded email with their DomainKey.
You haven't read the spec enough. To do this, the forwarder would have to change the "From:" header. Although this is benign, this is a type of forgery of the "From:" header, and forgery of the "From:" header is what DomainKeys is supposed to stop. -- Jeff Rife | "Damn it, I miss the sound of her voice. I tried SPAM bait: | putting silverware down the disposal, but it [EMAIL PROTECTED] | wasn't the same." [EMAIL PROTECTED] | | -- Ned Dorsey, "Ned and Stacey" _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang