On 2022-11-16 at 08:01:12 UTC-0500 (Wed, 16 Nov 2022 06:01:12 -0700)
Grant Taylor via users <gtay...@tnetconsulting.net>
is rumored to have said:

> Or said another way, DKIM is only supposed to be a /positive/ /assertion/ if 
> / when a DKIM signature validation passes. DKIM is supposed to not be 
> negative.

That's ABSOLUTELY CORRECT.

DKIM is known to be fragile in transit. It has ALWAYS been known to be fragile 
in transit. If you want a signature for repudiation purposes, you need *at 
least* DMARC on top or some other more robust signing mechanism.


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to