Re: [ietf-dkim] the actual problem DKIM addresses, was Review of draft-fenton-dkim-threats-01

2005-11-01 Thread John Levine
Absent SSP (or something like it), then in the broad sense of the word, DKIM does need some kind of reputation system to be effective. That depends what problem you're trying to solve, since there are some that only involve validating that the sending address is real without caring if the sender

Re: [ietf-dkim] the actual problem DKIM addresses, was Review of draft-fenton-dkim-threats-01

2005-11-01 Thread Dave Crocker
DKIM is operating at the message transport system. You are confusing an operational tendency to sign and validate by handling services within the origin and recipient administrative domains, versus a technology that is actually tied to the handling service. In reality, DKIM has nothing

Re: [ietf-dkim] the actual problem DKIM addresses, was Review of draft-fenton-dkim-threats-01

2005-11-01 Thread Douglas Otis
On Nov 1, 2005, at 7:46 PM, John Levine wrote: Absent SSP (or something like it), then in the broad sense of the word, DKIM does need some kind of reputation system to be effective. That depends what problem you're trying to solve, since there are some that only involve validating that the

Re: [ietf-dkim] the actual problem DKIM addresses, was Review of draft-fenton-dkim-threats-01

2005-11-01 Thread Hector Santos
- Original Message - From: John Levine [EMAIL PROTECTED] To: ietf-dkim@mipassoc.org Absent SSP (or something like it), then in the broad sense of the word, DKIM does need some kind of reputation system to be effective. That depends what problem you're trying to solve, since there