Re: [Dcrup] Adam Roach's No Objection on draft-ietf-dcrup-dkim-usage-04: (with COMMENT)

Seth Blank <seth@valimail.com> Tue, 24 October 2017 20:05 UTC

Return-Path: <seth@valimail.com>
X-Original-To: dcrup@ietfa.amsl.com
Delivered-To: dcrup@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 218A713B482 for <dcrup@ietfa.amsl.com>; Tue, 24 Oct 2017 13:05:59 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.585
X-Spam-Level:
X-Spam-Status: No, score=-0.585 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_28=1.404, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=valimail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pPmGORsoKaE7 for <dcrup@ietfa.amsl.com>; Tue, 24 Oct 2017 13:05:57 -0700 (PDT)
Received: from mail-qt0-x22f.google.com (mail-qt0-x22f.google.com [IPv6:2607:f8b0:400d:c0d::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4A441394FB for <dcrup@ietf.org>; Tue, 24 Oct 2017 13:05:57 -0700 (PDT)
Received: by mail-qt0-x22f.google.com with SMTP id 8so32079309qtv.1 for <dcrup@ietf.org>; Tue, 24 Oct 2017 13:05:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=valimail.com; s=google2048; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=6V56vk5fL1RgTM1XcoAkKit/5ISEIE6x7CFA2wTEZGc=; b=Jqs4r4OVM4YMxBFRuF1q9Q8N67rLe+GLVyaYeYxzjUQ3vYZSvSkE5dBxz8VDYdjnI8 ln7xpXspwprAJWXbZGt+J4en4gUdSkMz5jLyGVeMmk68GadWRbybUGfUAlOhMOD1XoMV zJNZZMSyDezEUiE7lt2g5u0jC5eKMamUTGAKw4nZi2TOqIwWpdW59+cHnYLxp3MXcXb4 oQ/sqDbBHZRdUCSQhvsRMb6P7/gP38j9dm8/eXE/OhIV2/gzjq7+RknkH/QN4spzdnx4 TUY8nwtMVhi9EOr8u3OKglgaPU9aJELwRWXFX5i0N3sJ5mOVSpqs/lMWDZsOav7Ay4j2 ZHdw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=6V56vk5fL1RgTM1XcoAkKit/5ISEIE6x7CFA2wTEZGc=; b=DkvJVjisaRwCvcMRdoSlBNcFQCePtTeWn1m/IjedkvmjGlhrq6BmRQIvZWsaoQZAya J41v6zXENxH5zoZcKhLfVv8S8mSXFuFRpQ1ZjrfNfEHfWd6I6siPLruIpUjnKoQ/PhJM Mo4g9snjcgNk8Bl97RfJIBGZicvXOQD5Mwdq+X995aJ87xu86xoDxwrDz27/bmSCxZ2l Bc0KRbzODIv2RK6U1VW6151bXSpw+7AkVr/OvuAUsH1kwrlAm9gLJmEl474LNG+uSRvn CwmYM2q2KeX8iFAHrh3/1fe6+YndRkUDjV7a1zkNvjGTtXqySO9e1zS2+pPD8ruTSCqG +Rsw==
X-Gm-Message-State: AMCzsaUaKXRK+eDN0Ij1vJkQNmkhoDxe//6KYpLUcYLq7fpKfDNoGnVn vMWvlqrNN54hiuoyHcsNRVnK6nBt0/qXawr5mJwy/93ApyE=
X-Google-Smtp-Source: ABhQp+QRL51HWUvilUBMoThobgRLP6tTJ7OfIz9nRrqYigT0Ng+paatgxrzFkNsI2EJ2MwG8XiFP2G8gx2M6Xbn7W9Q=
X-Received: by 10.237.34.201 with SMTP id q9mr26940935qtc.198.1508875556503; Tue, 24 Oct 2017 13:05:56 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.200.28.3 with HTTP; Tue, 24 Oct 2017 13:05:36 -0700 (PDT)
In-Reply-To: <CAL0qLwbvRhDqE5o6dXypw-jC71vwdrUJvcmBRRq_64QQw5A9pA@mail.gmail.com>
References: <150649085207.24995.1867894975380491185.idtracker@ietfa.amsl.com> <CAL0qLwYiuq3Pt80pkQc5RNr8VV4pAObkPCMYp1NweoEggii+tQ@mail.gmail.com> <CABkgnnXsHt-jEyCvoqXfrWWoQ3-XbwRKPfrFR0WfG1rxQnjrsA@mail.gmail.com> <2E80204C-37D7-4624-BD23-573C386D7899@kitterman.com> <CAL0qLwbXdwKSnhcjr0raVo1Sh+sRzDypLxzHc1swThkBAY8WFg@mail.gmail.com> <CAL0qLwbvRhDqE5o6dXypw-jC71vwdrUJvcmBRRq_64QQw5A9pA@mail.gmail.com>
From: Seth Blank <seth@valimail.com>
Date: Tue, 24 Oct 2017 13:05:36 -0700
Message-ID: <CAOZAAfPz5RNEjXGT8Ej7Xgq5BRRbNPjYWpvQf0AUxE8FxV4waQ@mail.gmail.com>
To: dcrup@ietf.org
Content-Type: multipart/alternative; boundary="001a1137b67a8e6a05055c507717"
Archived-At: <https://mailarchive.ietf.org/arch/msg/dcrup/eIJHqBNJUn8oG6TxvL387mOoc-c>
Subject: Re: [Dcrup] Adam Roach's No Objection on draft-ietf-dcrup-dkim-usage-04: (with COMMENT)
X-BeenThere: dcrup@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: DKIM Crypto Update <dcrup.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dcrup>, <mailto:dcrup-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dcrup/>
List-Post: <mailto:dcrup@ietf.org>
List-Help: <mailto:dcrup-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dcrup>, <mailto:dcrup-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Oct 2017 20:05:59 -0000

On Tue, Oct 24, 2017 at 1:03 PM, Murray S. Kucherawy <superuser@gmail.com>
wrote:
>
> In fact I would claim that by the definitions in Section 2.7.1 of RFC7601,
> "policy" is the only option.
>

I wanted to strongly argue for "fail" over "policy" here - but I concur
that within the confines of the current definition of fail in 7601,
"policy" is the only option that fits.

   fail:  The message was signed and the signature or signatures were
      acceptable to the ADMD, but they failed the verification test(s).

-- 

[image: logo for sig file.png]

Bringing Trust to Email

Seth Blank | Director of Industry Initiatives
seth@valimail.com
+1-415-894-2724 <415-894-2724>