Re: Other SMTP verification methods

[email protected] wrote:
> Trust is more complicated.  It's a vector.

  Which makes it difficult to manage in a network.

> My conclusion is that trust is very complicated.  But we have to deal 
> with identity first.  Suppose I got a message from somebody masquerading 
> as my daughter?  Which is why my daugher and I do not do finances over 
> E-mail.

  Identity is orthogonal to many SMTP verification schemes.  All that
is required is that SOME method of establishing identity exists,
however cheesy.

  e.g. IP address is one form of identity.

  Domain name may be a better one.  PGP keys are even better.

  These sorts of issues are why in the LMAP discussion document, I
wrote about concepts, and not about implementations.  Implementations
get lost in the syntax quagmire, and syntax isn't that important when
you're trying to see if the concept is viable.

  In the same way, identity is relevant to, but independent of,
verification schemes.

  Alan DeKok.