From: ned(_dot_)freed(_at_)mrochek(_dot_)com
[mailto:ned(_dot_)freed(_at_)mrochek(_dot_)com]
Since the semantics of this signature are different from any of the
others (this is really a signature from the domain owner,
or his/her
proxy, indicating permission to use an address in their domain),
another type of signature is required anyway.
Given that specifications exist for how to use S/MIME at the
domain level, this appears to be false.
Specifications, smeshifications.
The deployed code does not.
As Yogi Berra says "In theory, there is no difference between theory and
practice. In practice there is."