Re: [dmarc-ietf] draft-kucherawy-dmarc-base

2014-11-05 Thread Douglas Otis
On Nov 3, 2014, at 9:04 PM, Stephen J. Turnbull step...@xemacs.org wrote: Douglas Otis writes: After all, DMARC permits the weakest authorization as a basis for acceptance, so it would be misleading to describe DMARC results as having been *authenticated*. Well, no, it isn't necessarily

Re: [dmarc-ietf] draft-kucherawy-dmarc-base

2014-11-05 Thread Terry Zink
Since SPF authorizes an often _shared_ outbound IP address, it has been accurately described as an authorization method. DMaRC permits a DKIM signature to be spoofed and still allow a message to be accepted solely on the basis of SPF. What magic turns authorization into

Re: [dmarc-ietf] draft-kucherawy-dmarc-base

2014-11-05 Thread Murray S. Kucherawy
On Wed, Nov 5, 2014 at 10:35 AM, Terry Zink tz...@exchange.microsoft.com wrote: Since SPF authorizes an often _shared_ outbound IP address, it has been accurately described as an authorization method. DMaRC permits a DKIM signature to be spoofed and still allow a message to be accepted

Re: [dmarc-ietf] draft-kucherawy-dmarc-base

2014-11-05 Thread Scott Kitterman
On Wednesday, November 05, 2014 06:35:32 PM Terry Zink wrote: Since SPF authorizes an often _shared_ outbound IP address, it has been accurately described as an authorization method. DMaRC permits a DKIM signature to be spoofed and still allow a message to be accepted solely on the basis