3 ms·
DKIM is not an encryption algorithm. It is a standard for embedding and validating signatures in email headers. Unfortunately DKIM only supports rsa-sha1 and r
by bmenrigh 2y ago
DKIM is not an encryption algorithm. It is a standard for embedding and validating signatures in email headers.
Unfortunately DKIM only supports rsa-sha1 and rsa-sha256 signatures (https://datatracker.ietf.org/doc/html/rfc6376/#section-3.3 https://datatracker.ietf.org/doc/html/rfc6376/#section-3.3). It'd be nice to see DKIM get revised to allow Ed25519 or similar signatures.
- Avamander 2y agoEd25519-SHA256 support has existed for a while now. https://datatracker.ietf.org/doc/html/rfc8463 https://datatracker.ietf.org/doc/html/rfc8463
- bmenrigh 2y agoOh excellent. I didn't realize rfc6376 had been superseded.
- austin-cheney 2y agoWikipedia says it is a correlation check based upon a public key based signature. How is that not a form of encryption? Google says encryption is a process that scrambles data into a secret code that can only be decoded with a unique digital key, which is exactly what public keys are for.