s The signing practices apply only to the named domain, and not
to subdomains.
So this is intended to overcome the problem of not being able to use wildcards?
What is the query behavior that validators need to use, to discover this
record, when they start with a message having a deeply-nested From field
domain name?
To the extent that the above is not sufficiently clear:
There is not way to properly enforce or even discover the semantics of this
flag, in the general case of sub-domains. This option needs to removed or be
specified in a way that works.
d/
--
Dave Crocker
Brandenburg InternetWorking
bbiw.net
_______________________________________________
NOTE WELL: This list operates according to
http://mipassoc.org/dkim/ietf-list-rules.html