Hello again,

SM pisze:

Hello,
At 09:49 11-05-2008, Zbigniew Szalbot wrote:
I got following:
 $ dig _domainkey.lists.lc-words.com txt +short
 "o=-\;"
That means your messages should be signed with domainkeys, according
to rfc4870.
You can drop TXT RR (_domainkey.lists.lc-words.com), if you not going
to use domainkeys signer.

Just to make sure, it seems I have made two errors while setting up DKIM:

1/ I am not using domainkeys but DKIM. I am however, a bit lost with regard to what should the correct DNS entry look like.

If you are not using DomainKeys, you should not have the "o=-" as it means that the domain signs all mail with


Thanks for all the helpful hints and advice!
I beg your patience with me. Can you help me generate an appropriate DNS entry for DKIM?

1/ I do NOT use domainkeys, nor do I plan to do so.
2/ I ONLY use DKIM and all mail sent from lists.lc-words.com is signed with DKIM signature.

If I drop the "o=-" entry, that will just mean that some of the lists.lc-words.com mail may be signed with domainkeys, right?

If so, what should the correct DNS entry for DKIM look like?
I did look at http://www.elandsys.com/resources/sendmail/dkim.html
where they suggest
mail._domainkey.example.com. IN TXT "k=rsa;
entry, so in my case should it be
_domainkey.lists.lc-words.com IN TXT "krsa;
?

I currently have:
_domainkey.lists.lc-words.com. 2640 IN  TXT     "o=-\;"

Anyway, I used the auto-response mechanism for checking DKIM and here's what I got:
DKIM Test: pass (1024-bit key)
DKIM Author Signing Practice: no DNS record

Thank you again for your patience!

--
Zbigniew Szalbot
www.lc-words.com

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to