IETF Logo Mail Archive

Re: [ietf-dkim] draft-vesely-dkim-joint-sigs

Hector Santos <hsantos@isdg.net> Thu, 16 September 2010 07:40 UTC

Return-Path: <ietf-dkim-bounces@mipassoc.org>
X-Original-To: ietfarch-ietf-dkim-archive@core3.amsl.com
Delivered-To: ietfarch-ietf-dkim-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5A2BB3A68D1 for <ietfarch-ietf-dkim-archive@core3.amsl.com>; Thu, 16 Sep 2010 00:40:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.887
X-Spam-Level:
X-Spam-Status: No, score=-5.887 tagged_above=-999 required=5 tests=[AWL=0.112, BAYES_00=-2.599, J_CHICKENPOX_47=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id urQGwwVNbAPp for <ietfarch-ietf-dkim-archive@core3.amsl.com>; Thu, 16 Sep 2010 00:40:38 -0700 (PDT)
Received: from sbh17.songbird.com (sbh17.songbird.com [72.52.113.17]) by core3.amsl.com (Postfix) with ESMTP id 716733A6820 for <ietf-dkim-archive@ietf.org>; Thu, 16 Sep 2010 00:40:38 -0700 (PDT)
Received: from sbh17.songbird.com (sbh17.songbird.com [127.0.0.1]) by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id o8G7e5nB022374; Thu, 16 Sep 2010 00:40:10 -0700
DKIM-Signature: v=1; a=rsa-sha1; c=simple/simple; d=mipassoc.org; s=k00001; t=1284622812; bh=nIO/dBb2jFAJ2rQCY3acGN1We6I=; h=Message-ID:Date: From:MIME-Version:To:References:In-Reply-To:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: Content-Type:Content-Transfer-Encoding:Sender; b=dYMwUw1wqSYJGykg3 tBNmbh3b/EJLmhPkOqzJghINXcvWamET1kDGogrJ0IuYcTkeZVftZPpxXP1ptdjUXTq rStnb63w28jm5t/1Ay4pp/7W6blp6hrjKRrwPjgoGH863ZS4R46p8e/FXMbzUFqPjjH ndZo+eD6JkTt7i5wz04Q=
Received: from mail.winserver.com (ntbbs.winserver.com [208.247.131.9]) by sbh17.songbird.com (8.13.8/8.13.8) with ESMTP id o8G7dveQ022366 for <ietf-dkim@mipassoc.org>; Thu, 16 Sep 2010 00:40:03 -0700
Received: by winserver.com (Wildcat! SMTP Router v6.3.453.4) for ietf-dkim@mipassoc.org; Thu, 16 Sep 2010 03:40:26 -0400
Received: from opensite.winserver.com ([208.247.131.23]) by winserver.com (Wildcat! SMTP v6.3.453.4) with ESMTP id 4240854171; Thu, 16 Sep 2010 03:40:25 -0400
Received: by beta.winserver.com (Wildcat! SMTP Router v6.3.453.2) for ietf-dkim@mipassoc.org; Thu, 16 Sep 2010 03:37:43 -0400
Received: from [192.168.1.101] ([99.3.147.93]) by beta.winserver.com (Wildcat! SMTP v6.3.453.2) with ESMTP id 915905515; Thu, 16 Sep 2010 03:37:42 -0400
Message-ID: <4C91C951.4000309@isdg.net>
Date: Thu, 16 Sep 2010 03:37:53 -0400
From: Hector Santos <hsantos@isdg.net>
Organization: Santronics Software, Inc.
User-Agent: Thunderbird 2.0.0.24 (Windows/20100228)
MIME-Version: 1.0
To: ietf-dkim@mipassoc.org
References: <20100911020831.46457.qmail@joyce.lan> <45FACDAC-9316-4F89-A05A-3AEE07EF264B@cybernothing.org> <alpine.BSF.2.00.1009131959310.96949@joyce.lan> <107537F0-8AD1-47F8-B98B-5831AE9D07BE@paypal-inc.com> <alpine.BSF.2.00.1009141530120.37842@joyce.lan> <4C9114DE.7020408@tana.it> <4C91574B.2020902@isdg.net> <4C91ABEC.6030007@tana.it>
In-Reply-To: <4C91ABEC.6030007@tana.it>
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.0 (sbh17.songbird.com [127.0.0.1]); Thu, 16 Sep 2010 00:40:12 -0700 (PDT)
X-Greylist: IP, sender and recipient auto-whitelisted, not delayed by milter-greylist-4.0 (sbh17.songbird.com [72.52.113.70]); Thu, 16 Sep 2010 00:40:03 -0700 (PDT)
Subject: Re: [ietf-dkim] draft-vesely-dkim-joint-sigs
X-BeenThere: ietf-dkim@mipassoc.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DKIM Discussion List <ietf-dkim.mipassoc.org>
List-Unsubscribe: <http://mipassoc.org/mailman/listinfo/ietf-dkim>, <mailto:ietf-dkim-request@mipassoc.org?subject=unsubscribe>
List-Archive: <http://mipassoc.org/pipermail/ietf-dkim>
List-Post: <mailto:ietf-dkim@mipassoc.org>
List-Help: <mailto:ietf-dkim-request@mipassoc.org?subject=help>
List-Subscribe: <http://mipassoc.org/mailman/listinfo/ietf-dkim>, <mailto:ietf-dkim-request@mipassoc.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ietf-dkim-bounces@mipassoc.org
Errors-To: ietf-dkim-bounces@mipassoc.org

Alessandro Vesely wrote:
>> I see these generic possibilities:
>>
>> First party Example:
>>
>>      From: user@example.com
>>      DKIM-Required: example.com
>>      DKIM-Signature:  d=example.com h="From:DKIM-Required"
> 
> Yes, that's possible, but seems useless.  What I've been thinking about is
> 
>         From: user@example.com
>         DKIM-Required: list.example
>         DKIM-Signature: d=example.com h="From:DKIM-Required"
> 
> If it were agreed that a signature may be not valid unless 
> countersigned by the recipient, the risk of replay attacks would be 
> greatly diminished.

So in the above, the originating message author is telling the world 
that the domain list.example is expected to resign?  so it ends up 
like this?

     From: user@example.com
     DKIM-Required: list.example
     X-DKIM-Signature: d=example.com h="From:DKIM-Required"
     DKIM-Signature: d=list.example.com h="From:DKIM-Required"

X-DKIM-Signature means that it was stripped and/or nullified in the
in distribution. Illustrated above to show there was a change.

Am I reading your proposal correct here?

-- 
Hector Santos, CTO
http://www.santronics.com
http://santronics.blogspot.com


_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html

v2.41.0 | Report a Bug | By Email | System Status