Re: Last Call: <draft-kucherawy-dkim-atps-11.txt> (DKIM Authorized Third-Party Signers) to Experimental RFC

[Dave CROCKER <[e-mail]>]

On 12/4/2011 1:27 PM, John Levine wrote:
> ADSP already dictates use of the From: domain.

The the nature ADSP's use of the From: domain is fundamentally different from 
ATPS' use.

Broadly, we can distinguish:

    Name extraction:    determining what name is being claimed

    Name verification:  determining that the use of the name is authorized

    Name assessment:    determining whether the name is associated with good
                        or bad actor.

ADSP adds a constraint on name verification; it mandates that at least one DKIM 
d= name match the domain in the From: field.

ATPS essentially modifies name extraction, by making it a two-step process. The 
first step is the usual one, with d=, for use with validation, but the second 
one takes the domain in the From: field and makes it the output string to the 
assessment process.


 > ATPS is a modification
> to ADSP.  It doesn't change anything that DKIM reports, only the rule
> for deciding whether ADSP finds an Author Domain Signature.

While yes it has text pertaining to ADSP, I will claim that with ADSP, too, the 
modification is in name extraction rather than validation or assessment.

d/

-- 

   Dave Crocker
   Brandenburg InternetWorking
   bbiw.net