On Tue 01/Apr/2025 19:07:40 +0200 John R Levine wrote:
On Tue, 1 Apr 2025, Alessandro Vesely wrote:
Sorry for being unclear. What I meant was that, given DKIM2, a DKIM1 verifier could be updated to handle DKIM2 signatures —if DKIM2 signatures were specified with compatibility in mind.

That makes no sense at all.  Why would you waste time making a semi-broken DKIM verifier rather than just using a DKIM2 verifier?  It's just a software library.


The resulting DKIM verifier is not semi-broken, it's DKIM2-tolerant. And it's not just a library change, it's also the MTA interface.

Compatibility allows for step-wise adoption and migration. Incompatibility forces double signing forever.


Best
Ale
--



_______________________________________________
Ietf-dkim mailing list -- ietf-dkim@ietf.org
To unsubscribe send an email to ietf-dkim-le...@ietf.org

Reply via email to