They could have just read the RFC. DKIM was made specificly to allow this sort of thing for back compat. Its not a new attack.