OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
DKIM etc. versus backscatter

From: Wietse Venema (wietseporcupine.org)
Date: Tue Apr 15 2008 - 13:46:05 CDT


Rolf E.Sonneveld:
> An interesting question in this regard is, whether Postfix in an
> upcoming version will 'natively' support DKIM (i.e. 'more native' than
> the dkim-milter type of solution), more or less the way like DNS BL's
> are supported now from within an smtpd_client_restriction setting. As
> Postfix has a significant 'market share' I believe that native support
> of DKIM in Postfix would help a lot to reach some critical mass.

DKIM is available for Sendmail and Postfix, which have significant
market share. That provides critical mass opportunities.

Considering that it takes up to 2 years before Postfix ends up in
major distributions, building anything like this into Postfix is
premature. There are still debates on the ietf-dkim mailing list
on the protocol for finding out whether mail from a given domain
is supposed to be DKIM signed, and what their opinion is about
unsigned mail that claims to be from their domain.

I can see that dkim-milter has scaling limitations but those should
easily be fixed by running multiple dkim-milter "worker" processes
under control of a master daemon that spawns processes as needed.

        Wietse