--On Thursday, December 11, 2008 2:46 PM -0800 Quanah Gibson-Mount 
<[email protected]> wrote:

> --On Thursday, December 11, 2008 7:21 PM +0100 Mark Martinec
> <[email protected]> wrote:
>
>> Would it be practical to store a signing key (in PEM format) in LDAP,
>> or is it too risky, and storing a file name would be preferred
>> (filename within a fixed directory)? Finding the most appropriate
>> signing key is quite elaborate now (two level: known set of
>> available signing keys, and complicated by preferences in
>> @dkim_signature_options_bysender_maps), so this would have to
>> translate into LDAP lookups somehow, probably in a simplified
>> (less flexible) manner.
>
> We currently store certs in LDAP for other reasons.  As always, the
> question is how well you protect your data.  In our LDAP server, the
> amavis  user has its own credentials (binddn/password), and we use
> startTLS to  encrypt the session.  That may not be secure enough for
> other people.
>
> The translation of the lookups does seem the most problematic part of
> this.

I don't see anything immediately in place on this for 2.6.3, at least 
announcement wise.  Do you have a general timeframe on this (just so I can 
update our internal expectations on when this might be available)?

Thanks,
Quanah


--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration

------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
_______________________________________________
AMaViS-user mailing list
[email protected] 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to