Wayne wrote:
The major problem I see with your specialized NS server is that in
order for the forwarder problem to be solved every sender must run
one.
The sender can delegate the SES validation to a third party which runs a new
version of the DNS software where the SES validation is implemented. So not
every sender must run a specialized NS server.
Why use a modifier instead of just the exists: mechanism?
Because the "exists" mechanism does the DNS query also if the envelope
sender is not signed which make no sense.
"ses=exists:{%l}._ses.{%o}" or "ses=dns exists:{%l}._ses.{%o}" does it only
if the envelope sender is signed.
Roger