DKIM Deployment

[Dave CROCKER <>]

On 1/13/2010 11:40 PM, Serge Aumont wrote:
> I agree with this strategy but unfortunately it makes ADSP usefulness
> for almost every domain. If a domain is using an ADSP record value
> "discardable" .

ADSP is designed to be useful in a very limited set of cases.  Even in those 
cases, it's likely systemic utility is controversial, and frankly has nothing to 
do with DKIM's primary utility.  ADSP helps to discover bad actors; DKIM is 
designed to help distinguish good actors.


> So which domain can use ADSP with a real added value ? Domain without
> real users ?

Sites that a) experience a significant amount of From: field's domain name 
spoofing, and b) see significant email handling problems result from that spoofing.

For everyone else, it is an extra mechanism that provides no benefit, but adds 
to the likelood of false positives.

d/
--

  Dave Crocker
  Brandenburg InternetWorking
  bbiw.net