Re: [dmarc-ietf] indeterminisim of ARC-Seal b= value

On Thu, Mar 30, 2017 at 7:35 PM, Dave Crocker <dcrocker@bbiw.net> wrote:
>
> So to the extent that you are sure things really are that fragile, the
> answer is not going to be a test suite or excessively demanding algorithms,
> but a re-thinking of the details, to make the implementation and deployment
> issues simpler.

Exactly; we are in agreement. Where some discussion after the last interop
panned out was that deterministic behavior in the new headers would remove
this fragility. That's why the conversation was raised to this list instead
of happening off to the side.

If the consensus here is that the matter is not worth pursuing further,
that is fine - I just want to make sure we're all talking about the same
thing.

Seth

On Thu, Mar 30, 2017 at 7:35 PM, Dave Crocker <dcrocker@bbiw.net> wrote:

> On 3/30/2017 7:10 PM, Seth Blank wrote:
>
>> Dave, If we were only talking about ARC Signing messages, I'd generally
>> agree with the comments on this list.
>>
>> However, ARC is fundamentally different. It is about a chain of messages
>>
>
>
> Either you are correct, in which case ARC has been made far too fragile to
> be able to work with any serious degree of reliability at scale,
>
> or you are wrong, in which case the fact of there being a sequence of
> DKIM-ish signatures has the same requirements as for individual signatures.
>
> What you have been getting told by a range of folk with quite a lengthy
> history of DKIM and email deployment experience is in line with the latter.
>
> So to the extent that you are sure things really are that fragile, the
> answer is not going to be a test suite or excessively demanding algorithms,
> but a re-thinking of the details, to make the implementation and deployment
> issues simpler.
>
>
>
> d/
>
> --
> Dave Crocker
> Brandenburg InternetWorking
> bbiw.net
>
> _______________________________________________
> dmarc mailing list
> dmarc@ietf.org
> https://www.ietf.org/mailman/listinfo/dmarc
>

-- 

[image: logo for sig file.png]

Bringing Trust to Email

Seth Blank | Head of Product for Open Source and Protocols
seth@valimail.com
+1-415-894-2724 <415-894-2724>