qydlqcwsiacfymissuesapacheorg httpissuesapacheorgspamassassinshow_bugcgiid5829 additional comments vsietopkaraorg 20080218 2118 hmm interesting idea use user training see something admins want hadnt heard concept one uses training think equally important use quantify vulnerability users email service corporate service use estimate impact targeted phishing attack employees course would setup either redirect web page proxy count number visits detour web page otherwise used training concept commonly called embedded training learn related literature research issues recently published article researchers cmu design training systems httpscholargooglecomscholarcluster12192065727047269146 idea show users fall attacks firsthand experience give training material instead plainly bombarding didactic policy documents would happy improve codeadd new functionalities upon feedback receiving mail assignee bug watching assignee udcatmailabuseorg sat apr 26 154851 2008 message 2 date thu 14 feb 2008 172922 0800 douglas otis subject ietfdkim new issue ssp02 policy scope frank ellermann cc gfkyhddlmipassocorg messageid 5e68beb51a61449fb355b189b9f917c4mailabuseorg contenttype textplain charsetusascii formatflowed delspyes feb 14 2008 401 pm frank ellermann wrote douglas otis wrote smtp rfc2821 nntp rfc3977 msrp rfc4975 uucp rfc976 understand meant mentioned gateways may good initial list transport protocols illustrate one public transport affected would incorrect assume dkim policy assertion applies transports receiver may aggregate messages transports mailboxes primarily served smtp regardless transport dkim might used nonetheless transmitting domain implemented dkim specific transport protocol assertion messages signed needs reflect implemented receivers need decide whether wish merge messages one transport mailbox served smtp transport modified stream thirdparty receivers stream likely apply policy pertinent current transport syntax policy record affords enough flexibility transmitter express wish see policy applied example ssmtpuucp would mean domain uses smtp uucp exchange messages policy apply uucp verifier mta irrelevant message might started arrives mail likely smtp mail header field header field without studying fine print rfc 4356 rfcuseforusefor rfc 976 etc rfc 976 status unknown means major trouble read johns appeal first rfc 4356 attempt disaster thanks input would seem moved iana controlled protocol list policystag x73 fws fwsexcludedisavow policystagtype fws ssp02 wsp clear net utf8 sticks disavow ht maybe ssp03 say sp sorry quick cut paste rfc 4871 take 3 policy scope plaintext optional default colon separated list policy scopes specify protocols policy record applies verifiers given protocol must ignore record appropriate protocol listed currently defined protocol types follows matches unlisted transport protocols disavows protocol use excludes protocol policy assertions smtp rfc2821 nntp rfc3977 see iana ssp policy list additional protocols tag able tailor application policy various transport protocols may future implement dkim tag also disavow use specific protocols repudiate references domain gateway converts protocols ahead receiver may change policy applied uniform policy desired possible transports tag necessary default receiver combines messages various transports recommended policy pertaining primary transport protocol applied cases policy would smtp example ssmtpnntp would mean domain uses smtp nntp exchange messages policy apply nntp protocol disavowed dkim related transactions cease abnf policystag x73 wsp wspexcludedisavow policystag type 0 wsp wsp policystagtype disavow exclude policystagtype smtp nntp xpolicystagtype xpolicystagtype hyphenatedword future extension doug wed 06 aug 2008 191240 0800 bug 5829 phishtag spamassassin plugin redirecting links incoming emails