Signature based authentication systems such as Domain Keys, IIM, and DKIM
use a signature of a message's header and body to verify that the message
being verified is the one that was signed.
The signature schemes all sign a canonicalized version of the header
and body that is intended to be survive innocent changes introduced
as a message passes through the mail system, while being resistant to
changes that change the meaning of the message (for some definition of
meaning.)
This subgroup evaluates various canonicalization and signature schemes
with particular attention to changes introduced by mail forwarders and
relays in common use.