It appears that Bron Gondwana <[email protected]> said: >-=-=-=-=-=- > >I'm building slides to talk about DKIM2 in a webinar shortly, and thinking >about the crypto migration strategy. > >The first bits make sense: > >a) define a new key type >b) start signing with that in addition to the original algorithm >c) ... time passes, everybody can verify both types >d) you stop signing with the old algorithm > >The issue is, how do you know when it's safe to do "d"?
If we have a feedback mechanism, I'd expect it to include which signatures did or didn't validate, with values good, bad, or I dunno. R's, John _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
