Re: [dkim-milter-discuss] DKIM-Filter active, but not signing

[Murray S. K. <ms...@se...>]

On Sun, 3 Jun 2007, David Gibbs wrote:
> I thought it would sign everything that has the same domain name that is 
> specified in the 'Domain' config setting.

Were that the case, I could send mail through your SMTP server as a fake 
user in your domain and dkim-filter would sign it.

>>> # MTA                   name
>>
>> If you are using the MSA port for mail submission, set the MTA name to MSA.
>
> If I have no MTA set, will it ignore the setting ... or is there a
> default value?

The default is to sign messages from all MTA ports.

>>> SignatureTTL            0
>>
>> Then SignatureTTL is the time-to-live of signatures.  You have set
>> that to zero seconds.
>
> I didn't set a value on that as nothing indicated it was required.  I
> figured the default value would be sufficient.

0 is the default, meaning "don't use signature expirations".