Re: [mailop] unique/shared public DKIM keys per domain?

2017-10-10 Thread David Hofstee
Didn't Google mention they wanted the age of the keys to count in the spam score? Old keys tend to have a longer timeframe to get stolen I guess. Maybe a frequent key changes is an indicator of having good ops practices which result in fewer incidents? Funny enough, I have only ever met one

Re: [mailop] Rotating DKIM keys (was: Re: unique/shared public DKIM keys per domain?)

2017-10-10 Thread Kurt Andersen (b)
On Tue, Oct 10, 2017 at 9:03 AM, Philip Paeps wrote: > > Are there any published recommendations on how frequently one should > rotate DKIM keys? > Yes: https://www.m3aawg.org/documents/en/m3aawg-dkim-key-rotation-best-common-practices There's an update coming soon but the

Re: [mailop] unique/shared public DKIM keys per domain?

2017-10-10 Thread Laura Atkins
> On Oct 10, 2017, at 9:25 AM, Vladimir Dubrovin via mailop > wrote: > > > I can say nothing about Google, but selectors can really have indirect impact > on the reputation. > > We do not bind reputation directly to objects like domains, selectors, etc > and use dynamic

Re: [mailop] unique/shared public DKIM keys per domain?

2017-10-10 Thread Brandon Long via mailop
The *.gappssmtp.com default DKIM signatures for GSuite domains are currently all a single key, which would seem to say that we don't currently think that blending keys is a bad thing. That isn't to say it can't change in the future if there becomes a need, of course. Brandon On Mon, Oct 9, 2017

[mailop] Rotating DKIM keys (was: Re: unique/shared public DKIM keys per domain?)

2017-10-10 Thread Philip Paeps
On 2017-10-10 10:20:36 (-0400), John R Levine wrote: I rotate my keys every month, which seems to be more often than anyone else in the world. and they like my mail just fine. Are there any published recommendations on how frequently one should rotate DKIM keys? I've been rotating mine

[mailop] Outlook.com deliverability problem

2017-10-10 Thread John Morrissey
outlook.com's inbound MX is sporadically rejecting messages from us (devoted.com, sending via G Suite) with: 550 5.7.1 Service unavailable, Client host [209.85.216.174] blocked using Customer Block list (AS16012607) [CY1NAM02FT044.eop-nam02.prod.protection.outlook.com] AS16012607

Re: [mailop] unique/shared public DKIM keys per domain?

2017-10-10 Thread Vladimir Dubrovin via mailop
I can say nothing about Google, but selectors can really have indirect impact on the reputation. We do not bind reputation directly to objects like domains, selectors, etc and use dynamic tuples instead (that is content of this tuple is flexible to better match specific mailing type), and in

Re: [mailop] unique/shared public DKIM keys per domain?

2017-10-10 Thread Brandon Long via mailop
Yeah, I'd echo a bunch of what Vladimir said, selectors are useful for different mail streams from the same domain, and we've played with using it for reputation (as a tuple with domain). That said, we don't want to discourage rotation, especially not anything crazy like requiring senders to ramp

Re: [mailop] unique/shared public DKIM keys per domain?

2017-10-10 Thread Dave Warren
On 2017-10-10 08:20, John R Levine wrote: On Tue, 10 Oct 2017, David Hofstee wrote: Didn't Google mention they wanted the age of the keys to count in the spam score? I'll check but I would be surprised if it made much difference. I rotate my keys every month, which seems to be more often

Re: [mailop] unique/shared public DKIM keys per domain?

2017-10-10 Thread Benjamin BILLON via mailop
> The statement was the selectors do not have an effect on reputation, but that sometimes people believe they do because they changed the selector at the same time they changed other things. @Laura> that too; but there were clearly a possibility to say "no we don't use s= at all", it hasn't been