Re: A permission to re-sign header

On Thu, Apr 17, 2014 at 7:19 PM, John Levine <[email protected]> wrote:

> Since I am lazy, I will reuse DKIM key records and invent a new
> May-Resign header something like this:
>
> May-Resign: [email protected]; r=ietf.org; s=foo; a=rsa-sha256; \
>    t=1397786669; b=hashhashhash
>
> This is a permission to re-sign for a message From:
> [email protected], to be re-signed by a mailing list at ietf.org. The
> s= and a= and t= are the same as DKIM, the b= is a signature of a hash
> of the M-R header, similar to the b= signature in a DKIM-Signature.
> [...]
>

Could the same thing be accomplished by a slight adjustment to VBR,
allowing a zone to vouch for another with the specific meaning that this
means X is authorized to generate mail for Y as long as X signs it?

-MSK

_______________________________________________
ietf-822 mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-822