Re: [mailop] verifier.port25.com

2023-05-24 Thread Matthäus Wander via mailop
Alessandro Vesely via mailop wrote on 2023-05-24 18:37: Considering just DKIM tests, this one is the only tester which explicitly and clearly recognizes ed25519 signatures.  For the rest, EmailAudit reported a pass, but then said "DKIM key size is 0 bits. More senders are starting to use 2048

Re: [mailop] Microsoft Office365 not rejecting emails when instructed so by SPF recored?

2023-05-23 Thread Matthäus Wander via mailop
Benoit Panizzon via mailop wrote on 2023-05-23 15:35: Hi List I'm surprised... six-group.com is the biggest payment platform in Switzerland. Of course they use SPF to protect their domain from being abused by phishers. six-group.com does not use DMARC, so I would say there is room to

Re: [mailop] DKIM with 3072-bit or 4096-bit RSA signatures

2023-04-27 Thread Matthäus Wander via mailop
Florian Vierke via mailop wrote on 2023-04-27 10:01: I had the same question and the quoted sentence still doesn't explain the why for me. The key rotation explains, that it is possible to publish the keys without a harm for you, but I don't see a benefit for anybody in publishing the old

Re: [mailop] DKIM with 3072-bit or 4096-bit RSA signatures

2023-04-25 Thread Matthäus Wander via mailop
Matthäus Wander via mailop wrote on 2023-04-20 10:55: Hello everyone, what's the experience with DKIM signatures with RSA keylengths larger than 2048 bits? Is it supported by verifiers? Any known incompatibilities? The Cisco Secure Email Gateway (formerly Cisco ESA) and their cloud-based

[mailop] DKIM with 3072-bit or 4096-bit RSA signatures

2023-04-20 Thread Matthäus Wander via mailop
Hello everyone, what's the experience with DKIM signatures with RSA keylengths larger than 2048 bits? Is it supported by verifiers? Any known incompatibilities? RFC 6376 requires verifiers to validate 512 to 2048-bit RSA signatures. RFC 8301 changes this requirement to 1024 to 4096 bits. I'm