[ietf-dkim] New issue: Upward query vs. wildcard publication

[Daryl C. W. O'Shea]

Mark Delany wrote:
> John L wrote:
>>> percentages are "normal" vs. "unusual", but my cursory look a
>>> long time ago suggested that it met the 80-20 rule.
>>
>> You are certainly correct that most zones are pretty flat, but this
>> sounds like a DOS attack waiting to happen, send out junk with long
>> bogus addresses
> 
> I'm just raising this as a discussion point; what if we said that the 
> SSP record must (at least) exist at the registry cut-point?
> 
> It's not particularly pretty, but you (only) need about a 1,000 entry 
> database to define all the registry cut-points today. I know the size 
> because we've built this sort of database for other reasons. I think 
> SpamAssassin has something similar as well.

FWIW, here's what we use for cut points:

http://svn.apache.org/viewvc/spamassassin/trunk/lib/Mail/SpamAssassin/Util/RegistrarBoundaries.pm?view=co

surbl.org and uribl.com use the same cut points since they're mostly 
used by SA.


Daryl