Mark Martinec wrote on Tue, 7 Aug 2007 10:22:22 +0200: > Domains which choose a default policy are not required to publish > a policy (or SSP) record. Penalizing them for choosing not > to explicitly publish what is a default anyway, would be unjust.
I think that's not the point. The point is to distinguish between using DomainKeys and not using DomainKeys. At the moment a domain that doesn't use domainkeys is looked at as having default policy "may sign some". Frankly, I find this whole portion in the RFC badly flawed. It's an implicit opt-in which is considered bad in other circumstances (you know what I mean ...). I consider it bad here, too. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com