[remram]

That does not break the scheme at all? In fact it is counting on it. The point is to publish the private keys, which would match the public keys in your database.

The point is to forge emails, not domain keys.