[ietf-dkim] Possible issue with Parent Domain logic in SSP
fenton at cisco.com
Wed Jan 9 07:20:40 PST 2008
Charles Lindsey wrote:
> On Tue, 08 Jan 2008 18:34:27 -0000, Jim Fenton <fenton at cisco.com> wrote:
>> There's a fourth option that is designed to cover exactly this case:
>> 4) Publish ssp with dkim=strict and t=s and it will not apply to
>> subdomains like thirdparty.bank.com.
>> Of course, when you do this, it applies to all subdomains (and
>> hostnames), not just thirdparty.
> But can't you publish a full strict SSP for example.com, and also a
> separate not-so-strict SSP for billing.example.com? Or am I missing
> something? But that does mean you need to be able to say 'unknown'.
Yes, that works too, but it was implied in the original question that
the subdomain hadn't [yet] published an SSP record for the subdomain.
More information about the ietf-dkim