On Thu, 13 Sep 2007, Todd Lyons wrote: > I have in dns: > _domainkey.mrball.net IN TXT "o=-; r=domainkeys HEREATIS mrball.net" > (modified in obvious ways to prevent spam scraping) > > I use the test selector and my key is in test._domainkey.mrball.net. > > Does the r= setting need to go in the base _domainkey TXT field or in > the selector TXT field or both? I don't see anything that clearly says > one way or the other (though I will admit to skimming, I may have looked > over the big words IT GOES RIGHT HERE or similar.) And does dkim-milter > handle it in one or the other location?
In the context of DKIM, the "r=" goes in the SSP record which currently lives at "_ssp._domainkey" in your zone file. The base "_domainkey" record isn't used by anything in DKIM anymore. For DomainKeys, you have it in the right place. Note that this is undocumented; it's an extension to dkim-filter and dk-filter for diagnostic use only, and other implementations may not (in fact, probably don't) support it. It was left out of the base spec, as I recall, because it advertised a place spammers could go to get a likely-valid e-mail address. However, it has turned out to be a valuable debugging tool so I've continued using it for now. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
