3 ms·
A ton of people don’t ever rotate their DKIM keys. If you’re not using email tooling that handles it automatically on a regular basis it’s an easy thing to do s
by brightball 5y ago
A ton of people don’t ever rotate their DKIM keys. If you’re not using email tooling that handles it automatically on a regular basis it’s an easy thing to do since it doesn’t expire like an SSL cert.
Anybody gets their hands on the private key, ex employee, compromised via hack, etc then everything will sail through.
- windexh8er 5y agoYou may enjoy this (I believe it was on HN last year): "DKIM: Show Your Privates" [0]. [0] https://rya.nc/dkim-privates.html https://rya.nc/dkim-privates.html
- brightball 5y agoI remember it! Solid points all around.