On Sat 05/Apr/2025 18:58:02 +0200 John R Levine wrote:
On Sat, 5 Apr 2025, Alessandro Vesely wrote:
If we could just say these headers only occur once, if you see two just give
up, it makes the process somewhat simpler and more importantly ends the
argument about oversigning.
This argument overlaps with the idea of having those header fields silently
implied in the signature, with h= only mentioning possible extra fields.
That makes no sense. Which headers we sign and how many instances of them we
sign are completely orthogonal.
Didn't you said controlling uniqueness could replace oversigning?
On the other hand, I was looking at the modification algebra document. It
implicitly assumes that the headers that are being modified occur only once.
Does that imply that Resent-* headers cannot be signed?
Best
Ale
--
_______________________________________________
Ietf-dkim mailing list -- ietf-dkim@ietf.org
To unsubscribe send an email to ietf-dkim-le...@ietf.org
