--On Thursday, December 11, 2008 2:46 PM -0800 Quanah Gibson-Mount <[email protected]> wrote:
> --On Thursday, December 11, 2008 7:21 PM +0100 Mark Martinec > <[email protected]> wrote: > >> Would it be practical to store a signing key (in PEM format) in LDAP, >> or is it too risky, and storing a file name would be preferred >> (filename within a fixed directory)? Finding the most appropriate >> signing key is quite elaborate now (two level: known set of >> available signing keys, and complicated by preferences in >> @dkim_signature_options_bysender_maps), so this would have to >> translate into LDAP lookups somehow, probably in a simplified >> (less flexible) manner. > > We currently store certs in LDAP for other reasons. As always, the > question is how well you protect your data. In our LDAP server, the > amavis user has its own credentials (binddn/password), and we use > startTLS to encrypt the session. That may not be secure enough for > other people. > > The translation of the lookups does seem the most problematic part of > this. I don't see anything immediately in place on this for 2.6.3, at least announcement wise. Do you have a general timeframe on this (just so I can update our internal expectations on when this might be available)? Thanks, Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration ------------------------------------------------------------------------------ Register Now & Save for Velocity, the Web Performance & Operations Conference from O'Reilly Media. Velocity features a full day of expert-led, hands-on workshops and two days of sessions from industry leaders in dedicated Performance & Operations tracks. Use code vel09scf and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
