ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] Debunking the d= domain and DNS myth (was: Removal of AUID)

2011-04-04 16:46:14
One little-known DKIM fact is that one does not need a different
DNS record per d= domain. One strategically-chosen wild-card under
_domainkey.example.com suffices (e.g. one per sub-organization).

Not really.  The part to the left of _domainkey is the selector, so you 
can wildcard selectors (which I do, see this message), but not domains.

What you want is a DNS record for sel._domainkey.*.example.com, but don't 
suggest that unless you want to open a famous can of worms that have big 
bloody fangs.

Regards,
John Levine, johnl(_at_)iecc(_dot_)com, Primary Perpetrator of "The Internet 
for Dummies",
Please consider the environment before reading this e-mail. http://jl.ly
_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html

<Prev in Thread] Current Thread [Next in Thread>