Your message dated Thu, 13 Aug 2026 21:14:04 +0200
with message-id <[email protected]>
and subject line Closing ITP1140100 PhoenixDKIM
has caused the Debian Bug report #1140100,
regarding ITP: phoenixdkim -- DomainKeys Identified Mail (DKIM) signing and
verifying milter
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1140100: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1140100
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: wnpp
Severity: wishlist
Owner: Edmund Lodewijks <[email protected]>
X-Debbugs-Cc: [email protected]
* Package name : phoenixdkim
Version : 1.0.0
Upstream Contact: Edmund Lodewijks <[email protected]>
* URL : https://www.phoenixdkim.org/
* License : BSD-3-clause and SOSL (Sendmail Open Source License)
-- Same as the `opendkim` package that is currently in repos
Programming Lang: C, Lua, Perl -- (Core milter and library are C; miltertest
scripts and the Lua filter hooks are Lua 5.4; phoenixdkim-keygen is Perl. C is
the primary.)
Description : DomainKeys Identified Mail (DKIM) signing and verifying
milter
PhoenixDKIM is a standalone, security-focused DKIM signing and
verification milter that grew out of the OpenDKIM codebase and has
since taken its own direction. It uses the OpenSSL 3 / LibreSSL EVP
API, signs and verifies with RSA and Ed25519 (RFC 8463), and can dual
sign a message with both algorithms at once. Its security defaults are
deliberately strict: RSA-SHA1 is never validated (RFC 8301) and RSA
keys below 2048 bits are rejected.
DKIM provides a way for senders to confirm their identity when sending
email by adding a cryptographic signature to the headers of the
message, allowing receivers to verify that a message was authorised by
the owner of the signing domain and was not altered in transit.
Keys can be served from flat files, LMDB, Redis, an HTTP/HTTPS service
or HashiCorp Vault, with zero-downtime key rotation across multiple
valid selectors. Verification is DNSSEC-aware. Operational metrics are
available, all dependency-free, through a Prometheus text-file exporter,
an embedded Prometheus /metrics scrape endpoint, or a StatsD pusher, and
policy can be scripted in Lua 5.4. The package plugs into any
Milter-aware MTA such as Postfix or Sendmail, and supports both signing
and verification.
PhoenixDKIM is a security-focused DKIM milter: OpenSSL 3 / LibreSSL EVP
crypto, Ed25519 and dual signing (RFC 8463), strict defaults (no RSA-SHA1
validation per RFC 8301, 2048-bit minimum), DNSSEC-aware verification,
pluggable key backends (files, LMDB, Redis, HTTP, Vault) with
zero-downtime rotation, dependency-free metrics (Prometheus text-file,
embedded /metrics scrape endpoint, or StatsD), reproducible builds,
and Lua 5.4 policy scripting. It grew out of the OpenDKIM codebase but
has taken its own direction; it is not a drop-in replacement and is
intended to coexist with OpenDKIM.
This fork was created to bring the software up-to-date and make it safe
as an Internet facing software. The build system was changed from
Autotools to CMake, as I am more familiar with it. Tests were added and
others were updated. Many build profiles for AddressSanitizer, UBSan,
ThreadSanitizer, MemorySanitizer, Valgrind/Helgrind, and libFuzzer
fuzz targets, alongside hardened-build options (FORTIFY,
stack-protector, stack-clash, non-exec stack, CET).
Builds are reproducible (bit-for-bit, including the Debian packages).
It provides some other features than OpenDKIM does, and is different
from Rspamd in that it only does DKIM signing and verifying.
I have been using it in production.
I would need a sponsor. Since I am upstream and use it on my Debian
mail server, I think I will be the right person to maintain this. A
co-maintainer is always welcome in case I were to be incapacitated
somehow.
--- End Message ---
--- Begin Message ---
Hi,
I am closing this ITP for PhoenixDKIM, because I am no longer interested
in packaging it.
Kind regards,
Edmund
--
Edmund Lodewijks <[email protected]>
TZ: UTC+2 / GMT+2
--- End Message ---
