On 12/4/2011 1:27 PM, John Levine wrote:
ADSP already dictates use of the From: domain.
The the nature ADSP's use of the From: domain is fundamentally different from
ATPS' use.
Broadly, we can distinguish:
Name extraction: determining what name is being claimed
Name verification: determining that the use of the name is authorized
Name assessment: determining whether the name is associated with good
or bad actor.
ADSP adds a constraint on name verification; it mandates that at least one DKIM
d= name match the domain in the From: field.
ATPS essentially modifies name extraction, by making it a two-step process. The
first step is the usual one, with d=, for use with validation, but the second
one takes the domain in the From: field and makes it the output string to the
assessment process.
> ATPS is a modification
to ADSP. It doesn't change anything that DKIM reports, only the rule
for deciding whether ADSP finds an Author Domain Signature.
While yes it has text pertaining to ADSP, I will claim that with ADSP, too, the
modification is in name extraction rather than validation or assessment.
d/
--
Dave Crocker
Brandenburg InternetWorking
bbiw.net
_______________________________________________
Ietf mailing list
Ietf@xxxxxxxx
https://www.ietf.org/mailman/listinfo/ietf