Am 08.10.2010 08:47 schrieb Murray S. Kucherawy:
> The MTA detects this when collecting the stats of the child, and thus
> generates the unsigned DSN internally.
do you mean MTA=sendmail ?
I know that postfix *can* filter mails which do not arrive via SMTP:
http://www.postfix.org/MILTER_README.html#non-smtp-milters
>
> Perhaps the better thing to do would simply be to disable sending of ADSP
> failure reports back when the envelope sender is empty, since there's not
> much users can be expected to do about this problem. ADSP can still be
> checked and enforced on arrival of the message, but complaining back to
> the DSN generator about the failure is currently unactionable noise.
> Thoughts?
If a domain send unsigned DSN it should not announce ADSP=all.
That would be consequent.
Maybe the standards could be enhanced to ADSP=all-dsn
Otherwise a verifier can decides not to generate pain to the misbehaving sender/signer
So opendkim could have a switch to not complain about unsigned DSN
which is logical a "I will not generate pain" switch ...
--
########################################################################
#
# Andreas Schulze
# https://andreasschulze.de
#
# GnuPG Key-ID: A7DBA67F, https://andreasschulze.de/sca.asc
# GnuPG Fingerprint: 14C1 39A8 CE6D 6BE0 28C6 5652 03B5 6793 A7DB A67F
#
# $Id: .signature,v 1.3 2007-12-27 21:13:36 sca Exp $
########################################################################
Received on Fri Oct 08 2010 - 17:11:08 PST