> Right, because you need to grovel out the selector from the > DKIM-Signature line. Groan. > > That you can't mark a domain as requiring DKIM at the top-level seems > to be a design flaw in the protocol.
Yes, but I think the way that is fixed is spelled DMARC.
