[ietf-dkim] draft-levine-dkim-adsp-00

[Arvel Hathcock]

> Nobody I know of is arguing against checking to see if the domain
> exists.  The question is whether ADSP should define what domain
> existence means, or defer to other definitions.  Inventing our own
> definition is, as I think I've said in other messages, a rather severe
> case of mission creep.

Nobody I know is trying to define what domain existence means.  This is 
done for us in the DNS RFC's in the form of NXDOMAIN.   All we want to 
do is use NXDOMAIN to avoid a rather severe and easily perpetrated 
exploit of an otherwise workable protocol.

Arvel