Hi!
On 9/2/26 23:05, Timo Gerke wrote:
Looking at the current direction of DKIM2 and JSON structures, I
have to ask: Are we quietly trying to invent JNS (JSON Name
Service) next?
I'm a bit late to the game, but where are you seeing this? The DNS key
format draft is quite conservative, adding no fields to DKIM1 keys and
even deprecating a few, keeping the DNS record fully in tag-value syntax.
[...]
Making a mistake in early drafts by introducing JSON might be
human, but persisting with complex, structured formats in the
message transport layer despite the clear performance costs is
diabolical.
To me this reads like hyperbole. Have you benchmarked JSON parsers
recently?
A clean and lean API is worth so much more. To keep
DKIM2 secure against parsing overhead and DNS-over-TCP fallbacks,
we should strictly enforce flat, native tag-value representations
instead of JSON/YAML structures.
As said, DNS is tag-value.
Specifically, we need a dedicated field for Key Validity:
- We need a separate tag to signal when a key itself expires,
independent of the signature's expiration (x=).
Why? When a key expires, I'd expect it to be removed from DNS (or
replaced by an explicit revocation).
- To avoid the Year-2038-problem on legacy 32-bit hardware, we
also should think about setting the datatype of the signature
expiration and the key expiration field to uint64_t.
The timestamp field (t= in DKIM2-Signature, again in plain tag-value
syntax) is already specified with a ridiculously high limit, very far
from y2k38 issues. Signature expiry is specified to default to 2 weeks
after t=, and thus also y2k38 safe.
How an implementation represents large t= values is out of scope for a
specification text. For my sake, yes, it can use u64, but it could also
decide to use strings or an array of 6 times u8, as long as it supports
the range mentioned in the spec.
[...]
Hannah.
--
Hannah Stern
Software Developer
Mail Transfer Development
1&1 Mail & Media Development & Technology GmbH | | |
Phone: +49 721 91374-4519
E-Mail:[email protected] | Web:www.mail-and-media.com www.gmx.net www.web.de www.mail.com www.united-internet-media.de
Hauptsitz Montabaur, Amtsgericht Montabaur, HRB 5452
Geschäftsführer: Alexander Charles, Dr. Michael Hagenau, Thomas Ludwig, Dr.
Verena Patzelt
Member of United Internet
Diese E-Mail kann vertrauliche und/oder gesetzlich geschützte Informationen
enthalten. Wenn Sie nicht der bestimmungsgemäße Adressat sind oder diese E-Mail
irrtümlich erhalten haben, unterrichten Sie bitte den Absender und vernichten
Sie diese E-Mail. Anderen als dem bestimmungsgemäßen Adressaten ist untersagt,
diese E-Mail zu speichern, weiterzuleiten oder ihren Inhalt auf welche Weise
auch immer zu verwenden.
This e-mail may contain confidential and/or privileged information. If you are
not the intended recipient of this e-mail, you are hereby notified that saving,
distribution or use of the content of this e-mail in any way is prohibited. If
you have received this e-mail in error, please notify the sender and delete the
e-mail.
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]
