Mark Martinec wrote on Tue, 7 Aug 2007 10:22:22 +0200:

> Domains which choose a default policy are not required to publish
> a policy (or SSP) record. Penalizing them for choosing not
> to explicitly publish what is a default anyway, would be unjust.

I think that's not the point. The point is to distinguish between using 
DomainKeys and not using DomainKeys. At the moment a domain that doesn't 
use domainkeys is looked at as having default policy "may sign some".
Frankly, I find this whole portion in the RFC badly flawed. It's an 
implicit opt-in which is considered bad in other circumstances (you know 
what I mean ...). I consider it bad here, too.

Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



Reply via email to