-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
In message <[email protected]>, John Levine <[email protected]>
writes
>According to Richard Clayton <[email protected]>:
>>A very common arrangement is for the brand to set up a CNAME rather than
>>sharing key material.
>
>Huh? It needs to share the private key so the ESP can sign the mail.
the ESP creates the private and public key, the brand sets up a CNAME
that points into the ESP's DNS where they have placed a public key
record
>The main benefits of the CNAME is that it's a lot shorter than the full
>public key and so more likely to work with provisioning crudware that
>can't handle long text strings, and it's easier for the brand to revoke
>if they have a falling out with the ESP.
these statements are also true
- --
richard @ highwayman . com "Nothing seems the same
Still you never see the change from day to day
And no-one notices the customs slip away"
-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1
iQA/AwUBarr0k2HfC/FfW545EQLWrgCg8v9SJwPwNIW/MDOfkT+BcKauAuEAn1LU
2hQHexhzF8EniIaq+j4+VYCJ
=B4xj
-----END PGP SIGNATURE-----
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
