[ietf-dkim] AD evaluation comments for draft-ietf-dkim-ssp

2008-10-20 Thread [EMAIL PROTECTED]
Hi, I've done my AD review for draft-ietf-dkim-ssp-06, and I was happy to see that the document is in good shape. I do have couple of suggestions, though. Basically all of these are of "the WG members probably understand what this text means, but if you could add couple of more words, future read

Re: [ietf-dkim] A record for _domainkey.$DOMAIN?

2008-10-20 Thread Stephane Bortzmeyer
On Mon, Oct 06, 2008 at 04:09:38PM +0100, John L <[EMAIL PROTECTED]> wrote a message of 22 lines which said: > I'd suggest doing a lookup for A for _domainkey.$DOMAIN, and if you > get NOERROR (that is, 0 records but no error code), then check > *.$DOMAIN. I've finally used such an algorithm,

Re: [ietf-dkim] AD evaluation comments for draft-ietf-dkim-ssp

2008-10-20 Thread Stephen Farrell
Thanks Pasi, I'll work with the authors to get their reactions back to the list and we can go from there, Cheers, S. [EMAIL PROTECTED] wrote: > Hi, > > I've done my AD review for draft-ietf-dkim-ssp-06, and I was happy > to see that the document is in good shape. > > I do have couple of sugge

Re: [ietf-dkim] A record for _domainkey.$DOMAIN?

2008-10-20 Thread Jim Fenton
Stephane, Since it sounds like you have looked, what proportion of domains you surveyed has a wildcard? What kinds of wildcards are there: MX wildcards? Wildcarded A records? Wildcarded TXT due to SPF? -Jim Stephane Bortzmeyer wrote: > On Mon, Oct 06, 2008 at 04:09:38PM +0100, > John L <[E

Re: [ietf-dkim] AD evaluation comments for draft-ietf-dkim-ssp

2008-10-20 Thread Douglas Otis
On Oct 20, 2008, at 1:57 AM, [EMAIL PROTECTED] wrote: There is an alternative to the use of DNS existence that will allow use of wildcards and will not necessitate DNS existence tests. The alternative would be to define ADSP as applying to RFC5321. > - Section 3.3, 1st bullet would be clear

Re: [ietf-dkim] another 4871 Errata filed

2008-10-20 Thread Jim Fenton
Getting a little caught up... I don't think this is the right direction to go with this. Even though it shows up in many of the DomainKeys examples, there isn't any reason I can think of to include an empty g= tag in a DomainKeys key record. This proposal adds additional logic to the verifier to

Re: [ietf-dkim] another 4871 Errata filed

2008-10-20 Thread SM
At 15:12 20-10-2008, Jim Fenton wrote: >I don't think this is the right direction to go with this. Even though >it shows up in many of the DomainKeys examples, there isn't any reason I >can think of to include an empty g= tag in a DomainKeys key record. >This proposal adds additional logic to the