qvcimnfiqkwxudxmipassocorg send ietfdkim mailing list submissions gfkyhddlmipassocorg subscribe unsubscribe via world wide web visit httpmipassocorgmailmanlistinfoietfdkim via email send message subject body help qvcimnfiqkwxudxmipassocorg reach person managing list qghtrnrqbhlpvmipassocorg replying please edit subject line specific contents ietfdkim digest todays topics 1 new issue security threat unexpected thirdpartysenders michael thomas 2 new issue security threat unexpected thirdpartysenders hector santos 3 new issue ssp02 policy scope douglas otis 4 new issue ssp02 policy scope douglas otis ysgtmtcccom sat apr 26 154939 2008 message 1 date thu 14 feb 2008 081941 0800 michael thomas subject ietfdkim new issue security threat unexpected thirdpartysenders gfkyhddlmipassocorg messageid 47b46a1d8060106mtcccom contenttype textplain charsetiso88591 formatflowed wietse venema wrote john levine wrote trying forbid random third party signatures expect youd agree silly j falk yet treating random third party signature valid first party signature expect youd agree kind security issue would cause someone stand chair shout dkim never useful anything people suck toads yet another reason leave 3rd party signatures toadsucking scope suppose siegel ellen explicitly scope 3rd party signatures email random number valid use cases include 1 horse dead stays dead like quote think heard attributed usenet stain middle road laid dead horse mike mwbfbflsantronicscom sat apr 26 154939 2008 message 2 date thu 14 feb 2008 130149 0500 hector santos subject ietfdkim new issue security threat unexpected thirdpartysenders siegel ellen cc gfkyhddlmipassocorg messageid 47b4820d3020709santronicscom contenttype textplain charsetiso88591 formatflowed siegel ellen wrote original message lrbigfuhnacdbbdmipassocorg mailtoietfdkim xddnvjgmipassocorg behalf j falk explicitly scope 3rd party signatures email random number valid use cases include hmmmmm sounds like explicit scope statement essentially read correctly want mtas completely ignore messages 3rd party signatures message never signed point stage transport andor delivery process become play according falk read right indicated domain use dkimdiscardable protect unwanted 3rd party signatures agree sincerely hector santos cto httpwwwsantronicscom httpsantronicsblogspotcom tue 05 aug 2008 174411 0800 ietfdkim digest vol 107 issue 9