[krisrm]

I'm a bit shocked that MAIL-FROM auth was ever accepted, let alone until 2012. Even the other auth methods via email seem somewhat dangerous, though I sincerely hope these registries follow extremely strict policies for key management.

[throwaway984393]

That's how validation of TLS certificates and domain registration still works.