arvel.hathcock at altn.com
Sat May 24 15:48:49 PDT 2008
> Nobody I know of is arguing against checking to see if the domain
> exists. The question is whether ADSP should define what domain
> existence means, or defer to other definitions. Inventing our own
> definition is, as I think I've said in other messages, a rather severe
> case of mission creep.
Nobody I know is trying to define what domain existence means. This is
done for us in the DNS RFC's in the form of NXDOMAIN. All we want to
do is use NXDOMAIN to avoid a rather severe and easily perpetrated
exploit of an otherwise workable protocol.
More information about the ietf-dkim