On 7/7/2017 9:12 AM, Tim Draegen wrote:
I just caught up on the "selectors in AAR" thread, but wanted to go
back to this early statement about key rotation and pairing of "s="
and "d=" to identify a single source. Thus a new Subject: is born.
It's true key rotation is rare. People are figuring out how to do it,
though.
In our case, since day 0 of DKIM, maybe a handful of times was the
selector changed for our domains. I think its basically an DNS
"update" automation issue, i.e. its not "forced" or "scheduled" for
rotation if automated DNS update is not in place.
--
HLS
_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc
