Re: [ietf-dkim] Lists "BCP" draft available

2010-05-17 Thread Eliot Lear
John, > Yes, of course. The signature means that this message really truly > came from the mailing list, as opposed to being a random piece of spam > that happened to resemble list mail. What else would it mean? Lists > have never promised that the original sender was "real" nor that > messag

Re: [ietf-dkim] Lists "BCP" draft available

2010-05-17 Thread John R. Levine
> Lists never have had DKIM to deal with, so they've never had the option to > make any such promise. The signature lends the MLM's credibility to the > message, which in turn could hurt the MLM's credibility if it turns out to be > signing garbage. How else would a reputation for signers work

Re: [ietf-dkim] Lists "BCP" draft available

2010-05-17 Thread John Levine
>> A DKIM-aware resending MLM is encouraged to sign the entire message >> as it arrived, especially including the original signatures. > >Would I as an MLM want to resign a message that I received that itself >was not signed? Do I want to confer more authority to that message than >is wa

Re: [ietf-dkim] Lists "BCP" draft available

2010-05-17 Thread John Levine
>If think it would be an error to recommend that MLM handles "ADSP = >all" in the same way as they handle email with "discardable" domain. If >so "ADSP = all" will have a very poor difference with "ADSP = >discardable" a very very low number of domaines will use such ADSP policy. Agreed. We hav

Re: [ietf-dkim] Lists "BCP" draft available

2010-05-17 Thread Douglas Otis
On 5/17/10 2:47 AM, Serge Aumont wrote: > On 05/11/2010 07:48 PM, Douglas Otis wrote: > >> On 5/11/10 7:37 AM, Serge Aumont wrote: >> Serge, >> >> >>>-Sympa include DKIM signature verification and use DKIM signature >>> status in the process of message submission and email commands >>

Re: [ietf-dkim] Lists "BCP" draft available

2010-05-17 Thread Alessandro Vesely
On 17/May/10 11:47, Serge Aumont wrote: > "ADSP = discardable" means : "the domain encourages the recipient(s) to > discard it.". So a pretty MLM should discard thoses messages unless it > is able to brodcast it to subscribers without DKIM signature alteration. > "ADSP = all" does not recommend to

Re: [ietf-dkim] Lists "BCP" draft available

2010-05-17 Thread Eliot Lear
Hi Murray, Thanks for taking a shot at this. Here are some comments on the Lists draft. First, I support the draft becoming a working group document. However, I wonder if it requires simplification with a bit more discussion as to motivation. I'll get into some of that below. Introducti

Re: [ietf-dkim] Lists "BCP" draft available

2010-05-17 Thread Serge Aumont
On 05/11/2010 07:48 PM, Douglas Otis wrote: > On 5/11/10 7:37 AM, Serge Aumont wrote: > Serge, > >> -Sympa include DKIM signature verification and use DKIM signature >> status in the process of message submission and email commands >> -it remove broken pre-existing DKIM signature and keep o