Another list member noticed that the DNS TXT records for my DKIM keys
contained two strings rather than one. A TXT record is defined to contain
a list of counted strings, with each string up to 255 bytes, and the DKIM
spec says you concatenate all the strings together.
I found that my DNS software was limiting each string to 127 bytes rather
than 255, so I patched it and rebuilt my DNS records, and now everything
seems to work properly. Hmmn.
It appears that few DKIM records that would be more than 255 characters.
Have people checked that their verifiers do indeed handle multiple TXT
strings correctly? It's not something that would often come up unless you
deliberately made the strings shorter than normal.
Regards,
John Levine, johnl(_at_)taugh(_dot_)com, Taughannock Networks, Cambridge UK
"I dropped the toothpaste", said Tom, crestfallenly.
_______________________________________________
dkim-ops mailing list
dkim-ops(_at_)mipassoc(_dot_)org
http://mipassoc.org/mailman/listinfo/dkim-ops