text_combined: qvcimnfiqkwxudxmipassocorg send ietfdkim mailing list submissions gfkyhddlmipassocorg subscribe unsubscribe via world wide web visit httpmipassocorgmailmanlistinfoietfdkim via email send message subject body help qvcimnfiqkwxudxmipassocorg reach person managing list qghtrnrqbhlpvmipassocorg replying please edit subject line specific contents ietfdkim digest todays topics 1 draftietfdkimssp02txt aspssp section 28 charles lindsey 2 draftietfdkimssp02txt aspssp section 28 stephen farrell 3 id actiondraftietfdkimoverview08txt qfokcxikkhfhvqietforg 4 dead horse ssp failure scenarios vhwiohowbcoxcom wyzclerewmanacuk sun feb 24 102727 2008 message 1 date mon 11 feb 2008 124734 0000 charles lindsey subject ietfdkim draftietfdkimssp02txt aspssp section 28 dkim messageid contenttype textplain formatflowed delspyes charsetiso88591 fri 08 feb 2008 191515 0000 eric allman wrote hector say things evaluator lead believe youve got different idea say idea evaluator would first fundamental protocol consistency evaluator would part dkimssp framework across supportivecompliant systems would 100 independent subjective heuristics reputation analysis one group detecting questionable inherent policies implementations methods inverse model head evaluator completely dependent subjective heuristics reputation analysis short receiver decides process message indeed point introducing concept attempt make explicit scope normative definition ssp spec think hectors model aiui nearer want call dkim evaluator function examine available signatures including precise forms tags compare various sender whateverelse headers one would expect matched signatures report matching deficient regard ssp policies severities appropriate headers armed dkim evaluation report verifier knows senders would like messages treated top verifier also consider evidence possession clients preferences internal policies proceed sees fit process called local evaluator described ssp document beyond mention likely exists dkim evaluator fully described charleshlindseyathomedoingmyownthing tel441614366131 webhttpwwwcsmanacukchl emailwyzclerewmanacuksnail5clerewoodavecheadlesk83juuk pgp2c15f1a9fingerprint736dc25193a001e765e8647e14a4aba5 amaxculvdcyfoacstcdie sun feb 24 102727 2008 message 2 date mon 11 feb 2008 131349 0000 stephen farrell subject ietfdkim draftietfdkimssp02txt aspssp section 28 charles lindsey cc dkim messageid 47b04a0d8040206cstcdie contenttype textplain charsetiso88591 formatflowed hector whoever suggested changes ssp02 please raise issue including suggested new text process thanks stephen charles lindsey wrote fri 08 feb 2008 191515 0000 eric allman wrote hector say things evaluator lead believe youve got different idea say idea evaluator would first fundamental protocol consistency evaluator would part dkimssp framework across supportivecompliant systems would 100 independent subjective heuristics reputation analysis one group detecting questionable inherent policies implementations methods inverse model head evaluator completely dependent subjective heuristics reputation analysis short receiver decides process message indeed point introducing concept attempt make explicit scope normative definition ssp spec think hectors model aiui nearer want call dkim evaluator function examine available signatures including precise forms tags compare various sender whateverelse headers one would expect matched signatures report matching deficient regard ssp policies severities appropriate headers armed dkim evaluation report verifier knows senders would like messages treated top verifier also consider evidence possession clients preferences internal policies proceed sees fit process called local evaluator described ssp document beyond mention likely exists dkim evaluator fully described qfokcxikkhfhvqietforg sun feb 24 102727 2008 message 3 date mon 11 feb 2008 060001 0800 pst qfokcxikkhfhvqietforg subject ietfdkim id actiondraftietfdkimoverview08txt moepzjuytjietforg cc gfkyhddlmipassocorg messageid 200802111400014a2073a6bc7core3amslcom contenttype textplain charsetusascii new internetdraft available online internetdrafts directories draft work item domain keys identified mail working group ietf title domainkeys identified mail dkim service overview authors hansen et al filename draftietfdkimoverview08txt pages 23 date 20080211 document provides overview domainkeys identified mail dkim service describes fit messaging service also describes dkim relates ietf message signature technologies intended adopting developing deploying dkim dkim allows organization take responsibility transmitting message way validated recipient organization authors originating sending site intermediary one agents organization may use one domain names accomplish dkim defines domainlevel digital signature authentication framework email using publickey cryptography key server technology rfc4871 permits verifying message source intermediary one agents well integrity contents dkim also provide mechanism permits potential email signers publish information email signing practices permit email receivers make additional assessments messages protection email identity assist global control spam phishing url internetdraft httpwwwietforginternetdraftsdraftietfdkimoverview08txt remove id announcement list send message vcsdezvmumbbpdffvietforg word unsubscribe body message also visit httpswww1ietforgmailmanlistinfoidannounce change subscription settings internetdrafts also available anonymous ftp login username anonymous password email address logging type cd internetdrafts get draftietfdkimoverview08txt list internetdrafts directories found httpwwwietforgshadowhtml ftpftpietforgietf1shadowsitestxt internetdrafts also obtained email send message mailservietforg body type file internetdraftsdraftietfdkimoverview08txt note mail server ietforg return document mimeencoded form using mpack utility use feature insert command encoding mime file command decode responses need munpack mimecompliant mail reader different mimecompliant mail readers exhibit different behavior especially dealing multipart mime messages ie documents split multiple messages check local documentation manipulate messages data enable mime compliant mail reader implementation automatically retrieve ascii version internetdraft next part skipped content type multipartalternative vhwiohowbcoxcom sun feb 24 102727 2008 message 4 date mon 11 feb 2008 105815 0500 subject ietfdkim dead horse ssp failure scenarios messageid contenttype textplain charsetusascii tend agree heavily phished site know thru diligence communication prefers drop case broken signature would accommodated rest world would presented unsigned hoops jump thru thanks bill oxley messaging engineer cox communications 4048476397 original message lrbigfuhnacdbbdmipassocorg mailtolrbigfuhnacdbbdmipassocorg behalf john levine sent saturday february 09 2008 207 gfkyhddlmipassocorg subject ietfdkim dead horse ssp failure scenarios noticeable chunk youd discarding would legitimate mail users wanted isp pays attention senders want paying users want dont deserve business seems presuppose owner author domain doesnt control signing practices means author domain control perfect control signing practices always paths break ssp eg mailanarticle roaming users sending hotel mtas mailing lists forwarders replace sender lines know id like understand get noticeable chunk weve running dkim signing almost 2 years even diverse mail use patterns average megacorp still get 99 verification rates im sure average megacorp cisco ill bet cisco users send way less html mail businesses example lists like one mutate headers ways break signatures gather may kludge patch dont think expect everyone else sure domain tells ought consider tossing something isnt signed dropping pretty big hint users pretty likely object theyre wrong thats problem correct look back steves previous messages domains bad advice makes isp drop mail users want users blame isp ssp record would make reasonable isp rather gunshy believing advice random ssp records certainly heavily phished domains merit discarding given small fraction total universe mail much likely domains publish ssp discardable instead due admins dont understand means rs john _______________________________________________ note well list operates according httpmipassocorgdkimietflistruleshtml _______________________________________________ note well list operates according end ietfdkim digest vol 107 issue 1 tue 05 aug 2008 181421 0800 ietfdkim digest vol 107 issue 1