>Ah. I need to restate the question a bit. Sorry. > >What I was asking was whether the following would be a good >or bad idea.
Same answer. As part of the spec for an SSP-like thing, it makes sense to allow for limits on what a signer can sign, although I don't happen to think much of the specific limit rules proposed so far. As part of a threat analysis, it's somewhere between a premature optimization and an excursion to the swamps of no return. Please stop. R's, John _______________________________________________ ietf-dkim mailing list http://dkim.org
