>Internet-Draft draft-ietf-dkim-dkim2-spec-08.txt is now available. It is a
>work item of the Domain Keys Identified Mail (DKIM) WG of the IETF.
>
>   Title:   DomainKeys Identified Mail Signatures v2 (DKIM2)
>   Authors: Richard Clayton
>            Wei Chuang
>            Bron Gondwana
>   Name:    draft-ietf-dkim-dkim2-spec-08.txt
>   Pages:   64
>   Dates:   2026-10-27

with many thanks to Chris Drake (who let Claude loose on -07 with some
wisely chosen instructions) and Bron Gondwana (who did the same at
somewhat lesser scale) here is -08

decisions from the interim have been included

There are changes here for implementers to pay attention to, notably

* Switched to using "pure" ML-DSA-44 and specified it properly.

* Signatures now have AND/OR algebra. Inconsistent text removed.

        since there were arguments for OR semantics and also AND
        semantics the spec now allows the signer to choose

* Hashes now have AND/OR algebra.

        for consistency only, I doubt anyone will ever care

* Clarification on signing non-value parts of a signature.

        addresses Bron's sudden concern at the interim about
        removing signatures. I expect implementations got this
        right already but should not be crystal clear

* "Validly Signed DKIM2 Message" renamed "Fully Verified DKIM2 Message"

        as a chair suggested

* IANA section added

        there is no registry, if you want one argue why

* Changes to the list of ignored header fields.

        Bron got two entries wrong in his draft

* Clarifications to DSN validation and constraints on creation

        extremely subtle inconsistencies (and a clash with RFC5321)
        have been sorted

* Multiple other improvements and corrections

        I mean multiple, this has taken a lot of my time!

-- 
richard @ highwayman . com                       "Nothing seems the same
                          Still you never see the change from day to day
                                And no-one notices the customs slip away"
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to