--On Tuesday, October 19, 2004 7:56 am +0200 Jan-Peter Koopmann
<Jan-Peter.Koopmann@???> wrote:
> On Monday, October 18, 2004 10:24 PM exim-users-bounces@??? wrote:
>
>> You'd be much better off just using PGP end-to-end -- it
>> would be a lot less work even though it would mean teaching
>> all your correspondents to use it.
>
> Right....
>
> Anyways. I am using a envelope-sender-signature just for two purposes:
>
> 1. If a mail from <> reaches my MTA without a "valid" envelope-to (that
> is a signed address) it is bounced.
>
> 2. same goes for mails from postmaster@*.
Really, so if I write to you from my postmaster address, you'd reject that?
> All other mails are not subject to signature verification. Since mails
> from <> are - at least to my understanding - only supposed to be last
> resort mails like NDRs etc. and since - again from my understanding and
> practical experience with this method - these messages (and sender
> callouts) seem to use the envelope-from, I fail to see why this method
> poses any big problems.
>
> Please do not answer by citing 1 trillion RFCs. I am interested in why
> this will produce REAL problems and not why it might not be in 100%
> conformance with a RFC.
>
> Regards,
> JP
--
Ian Eiloart
Servers Team
Sussex University ITS
