Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-16 Thread Alessandro Vesely via mailop
On Thu 14/Oct/2021 21:35:02 +0200 Alexey Shpakovsky via mailop wrote: Worth noting that OpenDKIM's latest stable release was in 2015, and latest beta in 2018. The app seems to be in somewhat active development on Github, but to see it you must switch from default "master" branch to more active "

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-15 Thread Vsevolod Stakhov via mailop
On 14/10/2021 21:10, Mary via mailop wrote: > > I've tried to get in touch with the OpenDKIM developers with little success, > it appears that the project was alive 10 years ago with lots of development > effort, which eventually died along with all their other projects (OpenDMARC, > OpenARC, e

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-14 Thread Seth Mattinen via mailop
On 10/12/21 2:02 AM, Sidsel Jensen via mailop wrote: *My question to you: What are your thoughts on starting to sign with ed25519 keys and what is currently holdning you back?* As soon as Mail::DKIM supports it I'll probably do it (dual sign). ___ ma

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-14 Thread Noel Butler via mailop
opendmarc was very recently updated due to a security issue IIRC, I think was end of May start of June, v 1.4.1. Might have been on spamassassin list. I had a discussion with that person who's told me opendkim (which wont build on current supported openssl's without a patch), is being worked

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-14 Thread Mary via mailop
I've tried to get in touch with the OpenDKIM developers with little success, it appears that the project was alive 10 years ago with lots of development effort, which eventually died along with all their other projects (OpenDMARC, OpenARC, etc) Some poor dev seems to make a few adjustments her

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-14 Thread Alexey Shpakovsky via mailop
On Tue, October 12, 2021 11:02, Sidsel Jensen via mailop wrote: > My question to you: What are your thoughts on starting to sign with ed25519 keys and what is currently holdning you back? > Is this something that we could push for in 2022 together? While this question is likely to be aimed mostly

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-13 Thread Odhiambo Washington via mailop
On Wed, Oct 13, 2021 at 9:44 PM Vsevolod Stakhov via mailop < mailop@mailop.org> wrote: > On 13/10/2021 13:35, Odhiambo Washington via mailop wrote: > > > > > > On Tue, Oct 12, 2021 at 10:16 PM Slavko via mailop > > wrote: > > > > Ahoj, > > > > Dňa Tue, 12 Oct 20

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-13 Thread Vsevolod Stakhov via mailop
On 13/10/2021 13:35, Odhiambo Washington via mailop wrote: > > > On Tue, Oct 12, 2021 at 10:16 PM Slavko via mailop > wrote: > > Ahoj, > > Dňa Tue, 12 Oct 2021 19:52:38 +0100 Vsevolod Stakhov via mailop > mailto:mailop@mailop.org>> napísal: > > > You

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-13 Thread Patrick Ben Koetter via mailop
Hey Sidsel, Am 12.10.21 um 11:02 schrieb Sidsel Jensen via mailop: > Dear Mail Community > > We at one.com recently took another leap of faith and > started dual DKIM signing our outbound mails, so they both get DKIM > signed with rsa keys along with ed25519 keys. > > We’ve > rea

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-13 Thread Odhiambo Washington via mailop
On Tue, Oct 12, 2021 at 10:16 PM Slavko via mailop wrote: > Ahoj, > > Dňa Tue, 12 Oct 2021 19:52:38 +0100 Vsevolod Stakhov via mailop > napísal: > > > You can do it with Rspamd as well: > > > > > rspamadm dkim_keygen -d example.com -s dkim -t ed25519 > > > vYJfhPrDPls0CBf4Y5H1usrJu6OxDaYubEAldoy

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread Marc Bradshaw via mailop
Good to know. It's also pretty far down my list, but knowing adoption is starting may move it ever so slightly higher. On Wed, 13 Oct 2021, at 12:22 PM, John Levine via mailop wrote: > It appears that Slavko via mailop said: > >Dňa 12 Oct 2021 12:12:27 -0400 John Levine via mailop > > napísal:

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread John Levine via mailop
It appears that Slavko via mailop said: >Dňa 12 Oct 2021 12:12:27 -0400 John Levine via mailop > napísal: > >> The perl and python DKIM modules still don't support ed25519 keys. >> They're on my list of things to do, but pretty far down the list. > >python's dkimpy (and its CLI tool) is able to ch

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread Slavko via mailop
Hi, Dňa 12 Oct 2021 12:12:27 -0400 John Levine via mailop napísal: > The perl and python DKIM modules still don't support ed25519 keys. > They're on my list of things to do, but pretty far down the list. python's dkimpy (and its CLI tool) is able to check ed25519, but by default it checks only

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread Slavko via mailop
Ahoj, Dňa Tue, 12 Oct 2021 19:52:38 +0100 Vsevolod Stakhov via mailop napísal: > You can do it with Rspamd as well: > > > rspamadm dkim_keygen -d example.com -s dkim -t ed25519 > vYJfhPrDPls0CBf4Y5H1usrJu6OxDaYubEAldoyza9X4PwjpomnSnMJyf0tNLfDj5KvVAVGMI+DF3sPSDj3USA== > dkim._domainkey IN TXT

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread Vsevolod Stakhov via mailop
On 12/10/2021 11:38, Slavko via mailop wrote: > Dňa 12. 10. o 11:02 Sidsel Jensen via mailop napísal(a): >> My question to you: What are your thoughts on starting to sign with ed25519 >> keys and what is currently holdning you back? > > I am using dual sign with ed25519 keys for some months alrea

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread John Levine via mailop
It appears that Sidsel Jensen via mailop said: >My question to you: What are your thoughts on starting to sign with ed25519 >keys and what is currently holdning you back? The perl and python DKIM modules still don't support ed25519 keys. They're on my list of things to do, but pretty far down

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread Andris Reinman via mailop
mailauth tool (shameless plug, built by myself) is also able to both sign and verify ed25519 dkim keys. https://github.com/postalsys/mailauth/blob/master/cli.md Best regards, Andris Reinman Kontakt Slavko via mailop () kirjutas kuupäeval T, 12. oktoober 2021 kell 13:40: > Dňa 12. 10. o 11:02 S

Re: [mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread Slavko via mailop
Dňa 12. 10. o 11:02 Sidsel Jensen via mailop napísal(a): > My question to you: What are your thoughts on starting to sign with ed25519 > keys and what is currently holdning you back? I am using dual sign with ed25519 keys for some months already (i do not remember exactly without checking config,

[mailop] DKIM signing with ed25519 keys - leap of faith

2021-10-12 Thread Sidsel Jensen via mailop
Dear Mail Community We at one.com recently took another leap of faith and started dual DKIM signing our outbound mails, so they both get DKIM signed with rsa keys along with ed25519 keys. We’ve read https://www.mailhardener.com/kb/how-to-use-dkim-with-ed25519 with interest, so we do not rely e