Re: [Ietf-dkim] Replay attack definition discussion

2023-08-18 Thread Alessandro Vesely
On Thu 17/Aug/2023 20:12:51 +0200 Emanuel Schorsch wrote: On Thu, Aug 17, 2023 at 2:06 PM Alessandro Vesely mailto:ves...@tana.it>> wrote: If corporate domains are victims of replay attacks at the same rate as free mail providers, then my theory is wrong. See below. >  Ale, I think there is a

Re: [Ietf-dkim] Replay attack definition discussion

2023-08-18 Thread Emanuel Schorsch
> > > BUT, I think this is a good idea that is separate from DKIM Replay. > > Specifically, we do see non-free mail providers as victims of DKIM > Replay as > > well. > > > If the rate is similar, I agree. That kind of information is missing from > the I-D. > > > > For example, we have seen very l

Re: [Ietf-dkim] replay is a bogus concept

2023-08-18 Thread Steffen Nurpmeso
Jesse Thompson wrote in : |On Thu, Aug 17, 2023, at 12:02 PM, Steffen Nurpmeso wrote: |> More, usually (it happened in the past) they then point to their |> web site, where you then *do*, and isn't the certificate of that |> website, which itself is likely verified by some CA in some CA |> po