[dmarc-discuss] MLM and Header-From rewritting - the SMTPopen-relay analogy

Steve Atkins steve at wordtothewise.com
Sun Jun 8 14:54:05 PDT 2014


On Jun 8, 2014, at 2:21 PM, Larry Finch via dmarc-discuss <dmarc-discuss at dmarc.org> wrote:

> David,
> 
> On your most recent message my Mac client says “Unable to verify message signature”. Clicking on “Show details” it says that the certificate is not valid, email address mismatch.
> 
> Were you out to prove something?

That's just because this mailing list invalidates S/MIME signatures, due to the header rewriting. There's a point to be made there, perhaps, about the value of the From: field as an identifier of the author.

Cheers,
  Steve

> 
> best regards,
> Larry
> 
> 
> On Jun 8, 2014, at 1:36 PM, David Woodhouse via dmarc-discuss <dmarc-discuss at dmarc.org> wrote:
> 
>> On Sun, 2014-06-08 at 10:52 -0500, Al Iverson via dmarc-discuss wrote:
>>> On Sun, Jun 8, 2014 at 12:22 AM, David Woodhouse via dmarc-discuss
>>> <dmarc-discuss at dmarc.org> wrote:
>>> 
>>>> Any bank *not* signing its direct-to-customer email should be prosecuted
>>>> as an accessory to fraud which it is enabling by actively training its
>>>> customers to succumb to phishing :)
>>> 
>>> Since none of them do sign their mail with S/MIME today, will you be
>>> leading that prosecutorial effort personally? What kind of lawyers do
>>> you have lined up for the effort?
>> 
>> Oh, I'll probably use the same people I use when I say "these people
>> should be shot for being so stupid".
>> 
>> -- 
>> dwmw2
>> 
>> _______________________________________________
>> dmarc-discuss mailing list
>> dmarc-discuss at dmarc.org
>> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
>> 
>> NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
> 
> --
> Larry Finch
> finches at portadmiral.org
> 
> 
> 
> _______________________________________________
> dmarc-discuss mailing list
> dmarc-discuss at dmarc.org
> http://www.dmarc.org/mailman/listinfo/dmarc-discuss
> 
> NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)




More information about the dmarc-discuss mailing list