[dkim-ops] Test Results for various reflectors

Murray S. Kucherawy msk at sendmail.com
Thu Jun 8 22:53:07 PDT 2006


On Thu, 8 Jun 2006, Dan Mahoney, System Admin wrote:
> There's no support in dk-filter for signing in accordance with the base-02 
> spec is there?

Assuming you mean dkim-filter, correct.  The next version will explicitly 
support base-02, although the only relevant changes between base-01 and 
base-02 were clarifications as far as I recall and didn't actually change 
the format of the signatures or keys.

> This might explain my confusion -- on this page 
> http://testing.dkim.org/reflector.html should those be ietf 00 and ietf 01 
> instead of allman 00 and allman 01?  Or is there still something I'm missing?

That page is probably out of date.  At least the sendmail and blackops 
ones are wrong; both can do the IETF drafts.

>> Mostly we (being the working group) consider the most current version of 
>> each draft to be the one we're supporting, while including as much backward 
>> compatibility for prior versions as possible as well.  Eventually support 
>> for earlier versions will be dropped, especially as we progress toward an 
>> actual RFC being published.
>
> An (optional) version tag in the signature could be useful here (similar to 
> the one in an SPF record).

It's pretty much implicit.  If for example the signature contains a "bh" 
tag and/or uses "rsa-sha256", that's necessarily ietf-base-01 or later. 
That's at least how our implementation can claim to be adaptive.

>> As this has all been experimental and the draft process is not yet 
>> completed, it's kind of a moving target so documentation on very specific 
>> or uncommon issues can be hard to find.  List archives are also a good 
>> place to hunt around for answers to the more common problems.
>
> True, was just a little discouraging to find lists with volume over five 
> months in the past two years (and some of them, last posted in 2005 -- I 
> think we're fixing that now tho :))

There are about ten lists I know of, but only a few are actually active. 
This wasn't one of them.  :-)

If you're tinkering with dkim-milter, I believe the SourceForge lists get 
the most traffic.  If you want to beat on the specification itself as it 
moves toward IETF last call, the ietf-dkim list on this server is the 
place to be.


More information about the dkim-ops mailing list