[Asrg] 6. Proposals - CRI Draft - 4.1 Loop Avoidance

["Peter Kay" <[e-mail]>]

I finally had a chance to come up for air to respond to Eric/Yakov's
draft 
at http://www.ietf.org/internet-drafts/draft-irtf-asrg-cri-00.txt  .
ASRG owes you much for your hard work in creating this document and I
personally thank you for furthering an important area of
interoperability.

On loop avoidance section, specifically:

"For CRI systems that issue challenge messages, it is also recommended
that each CRI system use a local systemwide user, such as [e-mail],
for issuing challenges rather than preserving the original sender's
email address as the sender of the challenge message."

We disgree.

Most CR systems automatically/dynamically add the recipient to the
sender's whitelist.  So if I send an email to [e-mail], he's
automatically added to my whitelist.  If the mail-from on his challenge
is [e-mail], his email comes straight to my inbox without delays or
filters and certainly won't get challenged.  If the mail-from on his
challenge is "[e-mail]", the CRI protocol needs to be invoked,
possibly creating unecessary overhead.

Keeping the mail-from consistent allows CRI systems to naturally
interoperate and assuming that the CR system adds recipients to the
whitelist, elegantly solves the problem of CR systems challenging other
challenges.  

Peter





_______________________________________________
Asrg mailing list
[e-mail]
https://www1.ietf.org/mailman/listinfo/asrg