ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] CNAME's

2006-07-05 11:34:04
Michael Thomas wrote:
1) The benefits in general

Consolidation of multiple domains to a single key record.  Useful when
contracting out signing, wouldn't you think?

2) The security implications of the base DKIM mechanism (ie, is the
delegation
   model still correct, what about key rollover, etc, etc).

You own the domain.  If you CNAME over to somebody else you're trusting
them.
3) The unintended security implications (loops, dos, amplification...)

Dunno.  Mark's points apply.

Eliot
_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html