DKIM Deployment

[Jesse Thompson <>]

Also discussed:

* Indicate to the end-user that the message is DKIM signed, even if the
reputation of the sender isn't verified.  For example, Yahoo does this
by adding an image to the header view of any message that is signed.  If
you click on the image, it takes you to this help doc:
http://help.yahoo.com/l/us/yahoo/mail/yahoomail/context/context-07.html
 I have attached a screen shot for those of you that don't have a Yahoo
mail account.

I think that this should be easy to implement in most webmail clients
(or even as a plugin for desktop clients).  Once you enable dkim
filtering, you just need to modify your web client to display an image
conditionally based on what is in the Authentication-Results header.

Jesse

Leif Johansson wrote:
> 
> I'm writing these as user stories in the sense of agile development which
> means I'm trying to identify a subject, a desired action and a value that
> subject would derive from the action. There are probably lots of variations
> to these (eg multiple subjects deriving separate value from the same 
> action) and it is probably valuable to continue this exercise.
> 
> Note Well: I haven't checked my language for correctness or even for
> sensibility!
> 
> * Email admins want to re-enable bounce messages for trusted domain in 
> order to help receiving parties debug problems.
> 
> * Email admins want to be able to auto-whitelist sender IPs for greylisting 
> based on DKIM-signatures from trusted domains in order to avoid delays
> for messages from such domains.
> 
> * Email users want to know that an email comes from a domain which is
> part of a trusted membership organization (eg "this mail comes from an
> Internet2 member organization).
> 
> * In order to support evolving best practice by common email providers (eg
> gmail, yahoo) email users want DKIM signatures on forwarded messages.
> 
> * University management want to be able to send "official" email and have 
> such messages be recognized as "official" by common email clients 
> and email service providers.
> 
> * Researchers want to avoid delays imposed on email delivery when 
> communicating with funding organizations in order to decrease the risk
> of missing an important message or delaying a conversation.
> 
>       Cheers Leif
> 

-- 
  Jesse Thompson
  Division of Information Technology, University of Wisconsin-Madison
  Email/IM:

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature