@cynicalsecurity @stevelord Thanks, I'm pretty sure I could handle this, but also that I don't want to: as I understand DNS makes signature evaluation non-deterministic and according to some test services having a failed DKIM check results in worse scores than no DKIM, so it's better not to configure it in the first place...
Re: BIMI I hope I can sit out the time it dies as it should...