https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6287

--- Comment #1 from Mark Martinec <[email protected]> 2010-01-16 12:18:49 
UTC ---
> Although DKIM validation works OK for some sites, for some it fails with
> "unsupported key type".
> 
> [1353] dbg: dkim: signature verification result: INVALID (PUBLIC KEY:
> UNSUPPORTED KEY TYPE)

> Why is this public key type unsupported?

$ host -t txt kiva._domainkey.kiva.org
kiva._domainkey.kiva.org descriptive text "k=rs\; p=MIGfMA0G...AQAB"

Because 'rs' is not among the known key types as defined by RFC 4871
(section 3.6.1). So far the only know key type is 'rsa' (k=rsa, which
is a default anyway in the absence of a k tag).

> and can that be fixed ?

Certainly. Either let the kiva.org use the only known key type so far
(the 'rsa' type), or engage in the standardization process and add another
key type 'rs' to the set of recognized key types.

-- 
Configure bugmail: 
https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

Reply via email to