[VOIPSEC] DKIM Domain Key Identified Mail

[Mark Baugher]

On Nov 24, 2005, at 12:21 AM, Simon Horne wrote:

>
> Came across this draft to the IETF being used to authenticate email  
> and
> prevent spoofing.
>
> http://bgp.potaroo.net/ietf/idref/draft-allman-dkim-base/
> Interesting idea for a domain server to sign outgoing emails and  
> have the
> receiving server validate them with the sender domain's public key
> retrieved from DNS.
>
> It's very light weight and I wonder whether it would applicable to use
> between SIP servers
> ie the server signs the invite message and the receiver validates the
> signature before routing the message.

Isn't this the crux of SIP identity?

Mark
>
> I don't think storing in DNS and retrieving as required is a good  
> idea for
> real time communication however having a central repository might  
> be an
> idea which the SIP servers can put down every day or so. This will  
> save a
> lot of work compared to each server maintaining a large ACL
>
>
> Simon
>
>
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org