Re: [dkim-milter-discuss] Controlling the d= tag in a DKIM-Signature

[Mike M. <mi...@ma...>]

On Thu, Nov 29, 2007 at 10:47:25AM -0500, Dave Isaacs <dav...@en...> wrote:
> I've configured my Domain configuration to be a single domain and a
> single subdomain. For example
> 
> example.com
> dave.example.com
> 
> If the From address of a message is from the domain, for example,
> us...@ex..., then the DKIM-Signature will contain d=example.com
> 
> If the From address of a message is from the subdomain, for example,
> us...@da..., then the DKIM-Signature will contain
> d=dave.example.com.
> 
> Is it possible to control the contents of the d= tag so that it would be
> d=example.com for both?

I *believe* that specifying "-d example.com -D" will do what you want,
but that will have the additional side-effect of signing mail for any
subdomain of example.com.

Alternately, you can specify a KeyList and put something like this in
it:

*@example.com:example.com:/path/to/key
*@dave.example.com:example.com:/path/to/key

The first parameter is a glob to match against the sender, while the
second is the domain to sign as. (The third, of course, is the key file,
from which the selector name to use is derived)

-- 
Mike Markley <mi...@ma...>

I could write an album about riding in a bus and puking after a show
somewhere, but that's what Bon Jovi's for.
- Trent Reznor