DKIM Deployment

[Serge Aumont <>]

Dave CROCKER wrote:
>
>
> Jesse Thompson wrote:
>> One thing I notice is that all signatures from Yahoo and Facebook are
>> failing, 
>
>
> Separate from the debugging discussion that needs to (or has already)
> take place on this on the other mailing list, it might be interesting
> to get some discussion here about current use of DKIM, problems and
> benefits.
>
> Also, what would make DKIM more useful?
Is DKIM usefull only for antispam tools ?

We need some way to prevent email spoofing, at least inside our domain. 
Can I imagine a architecture of email services that will use  DKIM
signature and SMTP/AUTH in order to detect spoofing of the sender in
local emails ?
 I mean a way to reject messages issued from my local domain sent to my
local domain but that are not signed using DKIM ? It seems easy if DKIM
signature is added only to authenticated emails, but what about messages
that comes from an external service.

It is exactly the case with 
ddx@internet2;edu
 : my message is sent
signed but I will receive it back with a broken signature.

Serge