ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] multiple keys under same selector+domain?

2006-04-11 20:47:52
On Tue, Apr 11, 2006 at 09:11:53PM -0400, Jonathan Clark allegedly wrote:
     You slap a new key under the existing selector 

but i thought that that was exactly what one is supposed NOT to do.  
a selector gets at most one key.

I think this discussion has brought that out. It has sharpened my
understanding - yesterday I thought that you *would* stick multiple
keys under a single selector.

This does bring out the point about the need for non-normative text
about these various issues.

Multiple signatures - when and why
Multiple selectors - how and why
Key rotation - how and why

Along with best practices might be worst practices, such as:

Selector re-use
Multiple RRs per Selector label


Mark.


_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html