[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Authentication and email

Paul Hoffman / IMC <phoffman@imc.org> writes:

> At 9:33 AM -0800 1/31/03, Eric Rescorla wrote:
> >I'm not sure how you're drawing the distinction between providing
> >authentication for content and for senders.
>
> None of the headers are authenticated by S/MIME and PGP; only the body is.
So? Examining headers to determine who senders are is a bug,
not a feature. Sender authentication is provided by cryptographic
signature of the content.

-Ekr


-- 
[Eric Rescorla                                   ekr@rtfm.com]
                http://www.rtfm.com/