Re: [ietf-dkim] versions, Where is the formal definition of DKIM-Signature?

Dave Crocker <dcrocker@bbiw.net> Thu, 08 February 2018 17:02 UTC

Return-Path: <ietf-dkim-bounces@mipassoc.org>
X-Original-To: ietfarch-ietf-dkim-archive@ietfa.amsl.com
Delivered-To: ietfarch-ietf-dkim-archive@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBECF12D7F4 for <ietfarch-ietf-dkim-archive@ietfa.amsl.com>; Thu, 8 Feb 2018 09:02:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.999
X-Spam-Level:
X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=bbiw.net header.b=e7wbYq89; dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=bbiw.net header.b=GcRbqp58
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id As9URxaMnV4h for <ietfarch-ietf-dkim-archive@ietfa.amsl.com>; Thu, 8 Feb 2018 09:02:24 -0800 (PST)
Received: from simon.songbird.com (simon.songbird.com [72.52.113.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A377D127078 for <ietf-dkim-archive@ietf.org>; Thu, 8 Feb 2018 09:02:24 -0800 (PST)
Received: from simon.songbird.com (simon.songbird.com [127.0.0.1]) by simon.songbird.com (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w18H1fZq002640; Thu, 8 Feb 2018 09:01:42 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=bbiw.net; s=default; t=1518109304; bh=SctUQa6lGyKxjLNs1fOyZyJTtlpRp0rbQJpIngcMfpc=; h=To:References:From:Date:In-Reply-To:Cc:Subject:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: From; b=e7wbYq89V9Jn8XveIq6rMiD/7c1ayw5fVCXVQXBv1mPeUPpx8eWhLCsZg3r4qG7Q9 Np0ykNvth6gr5nXyiN/RDAEjgH9pPQh+HDaJCuPRMU7/oFBiRCNK4zU8bCycmkWYWa Lez94Jaw87d1FU3hKac+DJoOaBt1HgFw8Npmqjms=
Received: from [192.168.1.168] (76-218-8-128.lightspeed.sntcca.sbcglobal.net [76.218.8.128]) (authenticated bits=0) by simon.songbird.com (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w18H1d0o002630 (version=TLSv1/SSLv3 cipher=AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 8 Feb 2018 09:01:40 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=bbiw.net; s=default; t=1518109300; bh=r1uIGu4MH1/DAMH67kXp0ldstBcDSI2ryvMPDPRgTkM=; h=Subject:To:Cc:References:From:Date:In-Reply-To:From; b=GcRbqp58RjNQk0kmjdyBSdywNRw2O6jYWbIgyDJ06/sdk8BaQe6I62LUs04VnrQny 21lEo2/HuwaqlvVOfi1psLpUz7U3oTwZoftiL+Qr/H9EewsUN/gQIWImdC4N2PxMNA HaFlXfch21sKqWp+KWcZOLF+8nUzh79qbcEjmsgo=
To: "John R. Levine" <johnl@iecc.com>
References: <9e7d6a29-cbef-e032-4af9-eb5395071b4d@tana.it> <alpine.OSX.2.21.1802080808160.51311@ary.qy> <CAL0qLwYZPRdrg-J5KMreS==SUcnAU1pZXwgFURs5T3=XaX4HOg@mail.gmail.com> <20180208161754.25028.qmail@f3-external.bushwire.net> <alpine.OSX.2.21.1802081148580.52386@ary.qy>
From: Dave Crocker <dcrocker@bbiw.net>
Organization: Brandenburg InternetWorking
Message-ID: <8269e2b7-0f10-95f6-a3c1-d320ac4749d0@bbiw.net>
Date: Thu, 08 Feb 2018 09:00:35 -0800
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0
MIME-Version: 1.0
In-Reply-To: <alpine.OSX.2.21.1802081148580.52386@ary.qy>
Content-Language: en-US
Cc: ietf-dkim@mipassoc.org
Subject: Re: [ietf-dkim] versions, Where is the formal definition of DKIM-Signature?
X-BeenThere: ietf-dkim@mipassoc.org
X-Mailman-Version: 2.1.16
Precedence: list
List-Id: IETF DKIM Discussion List <ietf-dkim.mipassoc.org>
List-Unsubscribe: <http://mipassoc.org/mailman/options/ietf-dkim>, <mailto:ietf-dkim-request@mipassoc.org?subject=unsubscribe>
List-Archive: <http://mipassoc.org/pipermail/ietf-dkim/>
List-Post: <mailto:ietf-dkim@mipassoc.org>
List-Help: <mailto:ietf-dkim-request@mipassoc.org?subject=help>
List-Subscribe: <http://mipassoc.org/mailman/listinfo/ietf-dkim>, <mailto:ietf-dkim-request@mipassoc.org?subject=subscribe>
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: ietf-dkim-bounces@mipassoc.org
Sender: ietf-dkim <ietf-dkim-bounces@mipassoc.org>

On 2/8/2018 8:52 AM, John R. Levine wrote:
> On Thu, 8 Feb 2018, Mark Delany wrote:
>> Heh. I'm still waiting to hear a good reason as to why "v=" exists at 
>> all - apart
>> from exposing brittle parsers which mistakenly expect it to show up as 
>> the first
>> tag.
> 
> I had a draft that invented v=2, for headers with a tag syntax that is 
> not quite backward compatible with the current spec.  I realize that we 
> could change the header to DKIM-Improved-Signature but the change was 
> small and it smelled to me like the same header.


What you realized goes to the heart of the reason we don't need version 
numbers.

The issue falls into the category of how to specify a processing fork. 
At each protocol layer, there is a mechanism for specifying which 
processing engine is appropriate for the next layer up.  Ethertype, 
Protocol ID, Port, etc.

Version numbers serve that purpose /within/ a protocol layer.

They seek to distinguish important differences in processing for what is 
claimed to be the /same/ protocol.

Except really they don't.

If modifications to a protocol are upward compatible, the the new 
features, themselves, self-identify and version numbers aren't needed. 
If no new features are present, you have the old 'version' of the 
protocol.  If new features are present, you have the new 'version'.

If modifications are /not/ upward compatible, you really have a new 
protocol.  Make a new entry in whatever forking mechanism was used to 
get to the previous version.  As you note, a new header-field would be 
appropriate here.

d/


-- 
Dave Crocker
Brandenburg InternetWorking
bbiw.net
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html