Re: [Asrg] where the message originated

[Dotzero <dotzero at gmail.com>]

On Mon, Jan 12, 2009 at 10:42 AM, Steve Atkins <steve at blighty.com> wrote:
>
>
> Any mail system that only allows mail to be sent one at a time, and requires
> that the mail be hand-typed (rather than stored in a signature or pasted in)
> and which charges for the service via a credit card is going to be a
> negligible source of abusive email.
>
> KioskCo is definitely going to want to sign the outbound mail with their
> identity, as that identity is unlikely to get a bad reputation and will
> likely get a good reputation over time.
>
> Worst case, DKIM signing the mail will have no effect. More likely it will
> have some positive effect at some recipients. It's a nice example of why
> DKIM signing even low volume sources of mail can be a good idea, if they
> have the resources to actually do the signing.
>

Steve,

You assume the integrity of the KioskCo environment. That is not
necessarily a safe assumption to make. I will grant you that KioskCo
MIGHT be aggressive in responding to it's hosts being subverted. On
the other hand it may not. If blocking or discard of mail originating
from KioskCo is in effect, even for a short time, the individual using
that kiosk to send mail well may suffer the consequences of using a
mechanism with unknown security standards.

Just a thought.
_______________________________________________
Asrg mailing list
Asrg at irtf.org
http://www.irtf.org/mailman/listinfo/asrg