Andrew Newton wrote:
On Feb 21, 2006, at 10:22 AM, Michael Thomas wrote:
It should be noted that the only thing this affects is SSP.
A delegation cannot be overridden for selectors with the
exception of gross manipulation of NS records which is not
a dkim specific threat.
I guess I don't understand your point.
If the delegation of a domain name can be retargetted to another set of
name servers, can't those name servers synthesize any necessary
selectors such as with a wildcard?
I do agree that this problem is not specific to DKIM.
Yes.
I had forgotten about the d= in the signature, but the point
I was trying to make is that with SSP, all a TLD would need
to do is install a policy and it would cover the entire
DNS space that doesn't have a more specific policy. Sort of
like Verisign's "site finder" :) Registrars wield a lot of
power in the DNS world...
Mike
_______________________________________________
NOTE WELL: This list operates according to
http://dkim.org/ietf-list-rules.html