On Thu, Sep 13, 2007 at 11:34:16AM -0700, Todd Lyons <[EMAIL PROTECTED]> wrote: > I have in dns: > _domainkey.mrball.net IN TXT "o=-; r=domainkeys HEREATIS mrball.net" > (modified in obvious ways to prevent spam scraping) > > I use the test selector and my key is in test._domainkey.mrball.net. > > Does the r= setting need to go in the base _domainkey TXT field or in > the selector TXT field or both? I don't see anything that clearly says > one way or the other (though I will admit to skimming, I may have looked > over the big words IT GOES RIGHT HERE or similar.) And does dkim-milter > handle it in one or the other location?
It goes in the top-level _domainkey (i.e. policy) record; compare: http://tools.ietf.org/html/rfc4870#section-3.2.3 http://tools.ietf.org/html/rfc4870#section-3.6 I can't speak for what dkim-filter supports, but what you're using is DomainKeys policy, and DKIM is moving firmly in the direction of SSP. I wouldn't be surprised if dkim-milter doesn't support it unless doing DK verification (via -DVERIFY_DOMAINKEYS). AFAIK, though, DKIM SSP has no equivalent, so it's probably sane to keep publishing that for now (assuming you're also signing with DomainKeys). -- Mike Markley <[EMAIL PROTECTED]> Life is difficult because it is non-linear. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
