On Wed, 2004-03-03 at 02:23, Lars Dybdahl wrote:
On another note, to extend SPF wouldn't it be
a good feature to add something like:
example.com IN TXT "v=spf1 sig:sigserver.example.net"
The 'sigserver.example.net' box could then run
a whois like directory which contains PGP (or other)
signature methods just like the current pgp keyservers.
Maybe another kind of TXT record would be the right way to do it?
Or better yet, just put the key in DNS using the KEY RR provided by
DNSSEC. Then you don't have to call out to any external server using a
different protocol, you just continue using DNS.
--
Dustin D. Trammell
Vulnerability Remediation Alchemist
Citadel Security Software, Inc.