<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Wed, Sep 7, 2016 at 2:47 PM, Tom Mitchell <span dir="ltr"><<a href="mailto:mitch@niftyegg.com" target="_blank">mitch@niftyegg.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><span class="gmail-">On Wed, Sep 7, 2016 at 1:01 AM, Phill <span dir="ltr"><<a href="mailto:hallam@gmail.com" target="_blank">hallam@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="word-wrap:break-word">A while ago, I proposed a new form of ‘strong email address’ that combined a PGP fingerprint like identifier with an email address:<div><br></div><div>
<span style="line-height:107%;font-family:calibri">MB2GK-6DUF5-YGYYL-JNY5E?<a href="mailto:alice@example.com" target="_blank">alice@<wbr>example.com</a></span></div><div><br></div><div>The idea of this scheme is that <span style="font-family:calibri;font-size:11pt">MB2GK-6DUF5-YGYYL-JNY5E</span> i<wbr>s the fingerprint of a key under which a policy <br></div><div></div></div></blockquote><div> </div></span><div>It is interesting that Google's Gmail allows a name+suffix.<br>Filters allow binning of the messages.</div></div></div></div></blockquote><div><br></div><div>I should note that as important as domain security is the key issue is </div><div>end to end for the message and user identity. The Gmail email system of address </div><div>has a billion users and <a href="http://gmail.com">gmail.com</a> to <a href="http://gmail.com">gmail.com</a> would not see improved security because </div><div>both ends are under a single management... Same big numbers apply inside Facebook <br>messaging...</div><div><br></div><div>The number of domain MX records pointing into Google services is extensive.<br><br></div><div>Which reminds me that MX records opens man in the middle issues with </div><div>ease with the store and forward protocol of mail.<br><br>Some connectivity validation does happen with mail now.<br>DKIM-Signature: v=1; a=rsa-sha256;<br>Authentication-Results: <a href="http://mx.google.com">mx.google.com</a>;<br> dkim=pass header.i=@<a href="http://gmail.com">gmail.com</a>;<br> spf=pass (<a href="http://google.com">google.com</a>: domain of<pre style="color:rgb(0,0,0);word-wrap:break-word;white-space:pre-wrap"></pre></div><div><br></div></div><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"> T o m M i t c h e l l</div></div>
</div></div>