Update 10/16/09: If the notification request included the optional domain
parameter, the verification process works differently. 1. Instead of making a POST request we do a GET. 2. We include a challenge
parameter, a random string of characters (for my cloud implmentation I send 20 characters, but any number is allowed).