Re: A permission to re-sign header

> First of all, "permission to re-sign" seems to me to be the wrong semantics. 
> This is simply "originally sent from here to there". The originating site 
> (example.com) wants to say, "This message came from example.com and got sent 
> to [email protected]", in a way that someone who receives a message 
> from foo.example.net can check.

It has to be more than that, it has to say that it's OK for 
foo.example.net to pass it along in modified form.

I suppose it doesn't have to be re-signed, foo.example.net could do SPF 
path authentication, but that mixes message and path authentication in a 
way that makes me nervous.

Regards,
John Levine, [email protected], Taughannock Networks, Trumansburg NY
Please consider the environment before reading this e-mail.

_______________________________________________
ietf-822 mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-822