On 2 Mar 2009 at 11:01, Dave CROCKER wrote:
> Folks,
>
> I believe there was only one response to Murray's query. His request
> was not from idle curiosity.
>
> Murray S. Kucherawy wrote:
> > This is probably of particular interest to those of you who are
> > familiar with the internals of DKIM, i.e. the standard document and
> > thus the protocol itself, but everyone is invited to participate.
> >
> > Are there any portions of DKIM you feel are not useful to you? That
> > is, are there things in DKIM which, if they weren't there to begin
> > with, wouldn't make a difference to you? Or, on the flipside, are
> > there some things outside of the obviously mandatory features which
> > without which you would consider DKIM not useful? Or possibly, are
> > there some features you're not using now but you plan to use in the
> > future?
Following is a combined list of the features that I use on a Postfix installation
supporting several mail domains. I had some issues when trying to implement DKIM on a
single process processing all mail, but after splitting it into three processes handling
outgoing preprocessing, outgoing signing, and incomming, things have been running quite
smothly.
ADSPDiscard Yes
ADSPDiscard No
ADSPNoSuchDomain Yes
ADSPNoSuchDomain No
AlwaysAddARHeader No
AlwaysAddARHeader Yes
Background Yes
Canonicalization simple/simple
DontSignMailTo
ExternalIgnoreList
InternalHosts
KeyList
Mode s
Mode v
OmitHeaders X-Spam
On-BadSignature
On-DNSError
On-Default
On-InternalError
On-NoSignature
On-Security
On-SignatureMissing
RemoveOldSignatures No
RemoveOldSignatures Yes
SendReports Yes
SignatureAlgorithm rsa-sha256
SubDomains Yes
Syslog Yes
SyslogFacility local1
SyslogSuccess Yes
UMask 017
X-Header Yes
On the single system there were issues with determining which outgoing mail to sign, and
which incomming mail to check. I did get it working with a lot of help from Murray, but
it was a bit fragile. Other than the debuging bits, I currently don't plan to use any of
the other features.
The area that needed the most help, was installation on a non-sendmail system. Quite a
bit of frustration trying to get all of the necessary bits to get a clean complile.
...don
dhughes (at) microtechniques.com
White Plains, NY
|