Re: [dmarc-ietf] indeterminisim of ARC-Seal b= value

[Dave Crocker <[e-mail]>]

On 3/30/2017 7:10 PM, Seth Blank wrote:
> Dave, If we were only talking about ARC Signing messages, I'd generally
> agree with the comments on this list.
>
> However, ARC is fundamentally different. It is about a chain of messages


Either you are correct, in which case ARC has been made far too fragile 
to be able to work with any serious degree of reliability at scale,

or you are wrong, in which case the fact of there being a sequence of 
DKIM-ish signatures has the same requirements as for individual 
signatures.

What you have been getting told by a range of folk with quite a lengthy 
history of DKIM and email deployment experience is in line with the latter.

So to the extent that you are sure things really are that fragile, the 
answer is not going to be a test suite or excessively demanding 
algorithms, but a re-thinking of the details, to make the implementation 
and deployment issues simpler.


d/

-- 
Dave Crocker
Brandenburg InternetWorking
bbiw.net