[Mailsec] Re: SMTP headers in DATA block?

[Steffen Nurpmeso <[e-mail]>]

Steffen Nurpmeso wrote in
 <20250606223156.rzojSdtc@steffen%sdaoden.eu>:
 ...
 |In my opinion thus: if the DKIM signature of a sender verifies,
 |then this implies that in your example the RFC 5321.MAIL FROM is
 |allowed to send a message for the RFC 5322.From, period.

Not to mention that 5322 really says that if there are multiple
entries in 5322.From, 5322.Sender should be set.
That never made it to DKIM, not to talk about standards which
started to talk about 5322.From.
Though we now have Author, and even though it seems to finally get
some traction, not so in the IETF aka iterated DKIM / xy, where
there is no talk whatsover, also not in regard what to do with
Author as an indicator.

I want to express my doubts on the quality of software
surrounding all that, explicitly not leaving out my own, how tiny
it may be.

Outsourcing user identification issues downstream seems to be
a very strange thing to do.  It is impossible.
Actually, to be very very honest.  It is laughable.

--steffen
|
|Der Kragenbaer,                The moon bear,
|der holt sich munter           he cheerfully and one by one
|einen nach dem anderen runter  wa.ks himself off
|(By Robert Gernhardt)