[ietf-dkim] Possible issue with Parent Domain logic in SSP

[Charles Lindsey]

On Tue, 08 Jan 2008 18:34:27 -0000, Jim Fenton <fenton at cisco.com> wrote:


> There's a fourth option that is designed to cover exactly this case:
>
> 4) Publish ssp with dkim=strict and t=s and it will not apply to
> subdomains like thirdparty.bank.com.
>
> Of course, when you do this, it applies to all subdomains (and
> hostnames), not just thirdparty.

But can't you publish a full strict SSP for example.com, and also a  
separate not-so-strict SSP for billing.example.com? Or am I missing  
something? But that does mean you need to be able to say 'unknown'.

-- 
Charles H. Lindsey ---------At Home, doing my own thing------------------------
Tel: +44 161 436 6131                       
   Web: http://www.cs.man.ac.uk/~chl
Email: chl at clerew.man.ac.uk      Snail: 5 Clerewood Ave, CHEADLE, SK8 3JU, U.K.
PGP: 2C15F1A9      Fingerprint: 73 6D C2 51 93 A0 01 E7 65 E8 64 7E 14 A4 AB A5