Subject: [dane] using DMARC to signal policy for email canonicalization, signing and encryption

From: "Wiley, Glen" <[email-masked]>
Date: Tue, 2 Feb 2016 23:57:57 +0000

In light of all of the discussion about how the LHS of email addresses are normalized and encoded/hashed in order to be used to publish certificates and keys via DANE records like SMIMEA and OPENPGPKEY we have put together an approach that lets a zone owner signal the policy that is used for their domain by adding a few keywords to the DMARC record.

The draft is at: https://datatracker.ietf.org/doc/draft-osterweil-dmarc-dane-names/

We welcome discussion about this approach.
--
Glen Wiley
Principal Engineer
Verisign, Inc.
(571) 230-7917

A5E5 E373 3C75 5B3E 2E24
6A0F DC65 2354 9946 C63A