Re: A permission to re-sign header

On 4/18/14 2:05 PM, John R Levine wrote:
>> First of all, "permission to re-sign" seems to me to be the wrong 
>> semantics. This is simply "originally sent from here to there". The 
>> originating site (example.com) wants to say, "This message came from 
>> example.com and got sent to [email protected]", in a way that 
>> someone who receives a message from foo.example.net can check.
>
> It has to be more than that, it has to say that it's OK for 
> foo.example.net to pass it along in modified form.

Why? Why isn't the fact that I sent the mail directly to this thing 
enough implicit permission for it to pass my message along in modified 
form? Is the threat model here supposed to include preventing the 
workings of evil mailing lists that I intentionally send mail to?

pr

-- 
Pete Resnick<http://www.qualcomm.com/~presnick/>
Qualcomm Technologies, Inc. - +1 (858)651-4478

_______________________________________________
ietf-822 mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ietf-822