Subject: Re: [dmarc-ietf] DKIM through mailing lists (rebutting MLs won't change)

From: Douglas Otis <[email-masked]>
Date: Thu, 5 Jun 2014 11:15:07 -0700

Dear J. Gomez,

Oops. Multi-tasking too much between conversations it seems.

This is what was intended in the last paragraph.

The basic goal is to devise a means to establish informal federations of domains with a goal of not altering messages.  With this goal, it can therefore be assumed to protect the underlying identities.  Once a message is re-written by a third-party with an unknown relationship, nothing can be trusted.  Very soon, domains will be the only practical means to follow chains of trust.  Domains that are making use of DMARC are receiving valuable feedback that should help avoid any need to ask users about which services they are using, especially those reported as not passing an alignment test.  Before throwing the switch to p=reject, the provider should make their best effort to ensure no legitimate email is lost and that no message is modified just to suit a non-compliant DMARC scheme.  A fully transparent informal federation scheme will provide this feature by making use of TPA-Labels.

Regards,
Douglas Otis