It appears that Murray S. Kucherawy <superu...@gmail.com> said: >-=-=-=-=-=- > >On Fri, Apr 18, 2025 at 10:11 AM Alessandro Vesely <ves...@tana.it> wrote: > >> Why didn't the practice of signing by user name, as in i= >> john....@example.com, >> catch on? Would personal responsibility have played a role? Will it now? >> > >How would that address the replay question?
Beyond that, the assumption that the entity applying the signature can reliably identify the email address of the person or entity sending the message is wildly optimistic. On my system it can't tell and even if it could tell, as often as not the mail is coming from a system process with no e-mail address. R's, John _______________________________________________ Ietf-dkim mailing list -- ietf-dkim@ietf.org To unsubscribe send an email to ietf-dkim-le...@ietf.org
