DKIM and DomainKeys

[Ian Eiloart]

--On 30 June 2009 09:33:58 -0400 Rick Cooper <rcooper@...> wrote:

> While DKIM is certainly the standard today I would bet it will
> take as long for people to move to DKIM as it did for them to adopt
> domainkeys

<http://blogs.cisco.com/news/comments/domainkeys_identified_mail_dkim_grows_significantly/>

Yahoo! and Google both have adopted it, both inbound and outbound.


--
Ian Eiloart
IT Services, University of Sussex
01273-873148 x3148
For new support requests, see http://www.sussex.ac.uk/its/help/

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

[Jethro R Binks]

On Wed, 1 Jul 2009, Ian Eiloart wrote:

> --On 30 June 2009 09:33:58 -0400 Rick Cooper <rcooper@...> wrote:
>
> > While DKIM is certainly the standard today I would bet it will
> > take as long for people to move to DKIM as it did for them to adopt
> > domainkeys
>
> <http://blogs.cisco.com/news/comments/domainkeys_identified_mail_dkim_grows_significantly/>

Which took me eventually to:

  http://dkim.org/deploy/exim.html

Maybe the current status details for Exim should be completed.

Jethro.

.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
Jethro R Binks
Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Ian Eiloart wrote:

>> While DKIM is certainly the standard today I would bet it will
>> take as long for people to move to DKIM as it did for them to adopt
>> domainkeys
>
> <http://blogs.cisco.com/news/comments/domainkeys_identified_mail_dkim_grows_significantly/>

Thanks for the link!

> Yahoo! and Google both have adopted it, both inbound and outbound.

As has almost everyone else who had deployed DK earlier.

/tom

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

[Michael Deutschmann]

On Tue, 30 Jun 2009, Tom Kistner wrote:
> Domainkeys support has been dropped. I don't really feel like bringing
> it back, since I now consider it to be a dead proprietary technology.

I wouldn't call DK completely obsolete just yet.

DKIM is in two parts, both of which are necessary to replace the role of
DK.  The first part, the procedure to detect bogus signatures, is
complete.  But the second part, the procedure to detect *missing*
signatures, isn't.

So, I'd still want to double sign my messages -- with DK to allow people
to discard unsigned forgeries, and with DKIM merely to test the first
half of the new protocol.


Also, DKIM provides for signatures other than the domain of the From:
address.  While such signatures are not needed when using DKIM as a
replacement for DK, they may well have a use in the future.  If so, Exim
might be called upon to add two or more DKIM signatures at once to a
message.

So your library should be flexible enough to handle two DKIM signatures.
If it is, then it shouldn't be to hard to extend it to handle one DKIM and
one DK signature -- since DK is just DKIM with a slightly different header
format.

---- Michael Deutschmann <michael@...>


--
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/