ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] x= lets senders expire responsibility

2006-04-13 09:10:45

On Apr 13, 2006, at 8:19 AM, Hector Santos wrote:


How about this in section 5.2:

| 5.2  Select a private-key and corresponding selector information
|
|    ..
| A signer SHOULD NOT sign with a key that is expected to expire within
|    seven days; that is, when rotating to a new key, signing should
|    immediately commence with the new key and the old key SHOULD be
| retained for at least seven days before being removed from the key
|    server.

That basically means that x= must be used if there is planned event for
selector removal within 7 days.


When the transport includes IMAP and POP, this 7 day advice is far too short of a period to ensure verification.

-Doug
_______________________________________________
NOTE WELL: This list operates according to http://mipassoc.org/dkim/ietf-list-rules.html