On Tue, 2025-10-14 at 17:07 +0200, Jan Stary wrote: > > Should the pkg-readme of opensmtpd-filter-dkimsign be reviewed? > The main question has already been properly answered. As for this bit: My main goal was to make it easy for people to generate and transform keys with base-tooling, and not having to resort to obscure 3rd party tools. And since the base commands were already there, it would be just as easy to cast it into a a full record format. The <selector>._domainkey.<domain> bit is imo a non-intrusive extra bit to make sure that people know the right context to place the generated text and can use that as an anchorpoint to study further.
If you can think of a similar non-obtrusive way to document the split I'm not going to complain, but keep in mind that: - I think that for a "simple" tool as dkimsign, the README is already quite large - The administrator should do research on how the DKIM protocol works as a whole. Your question goes for all DKIM implementations, and I'm reluctant to put generic information in a dkimsign(8) specific README. There's also no further explanation on the tags and how they should be used. - I don't want to assume nsd, and there are vendors out there whose web interfaces split up the lines for you, and there might be other tools out there who might do the same. martijn@
