>Internet-Draft draft-ietf-dkim-dkim2-spec-08.txt is now available. It is a
>work item of the Domain Keys Identified Mail (DKIM) WG of the IETF.
>
> Title: DomainKeys Identified Mail Signatures v2 (DKIM2)
> Authors: Richard Clayton
> Wei Chuang
> Bron Gondwana
> Name: draft-ietf-dkim-dkim2-spec-08.txt
> Pages: 64
> Dates: 2026-10-27
with many thanks to Chris Drake (who let Claude loose on -07 with some
wisely chosen instructions) and Bron Gondwana (who did the same at
somewhat lesser scale) here is -08
decisions from the interim have been included
There are changes here for implementers to pay attention to, notably
* Switched to using "pure" ML-DSA-44 and specified it properly.
* Signatures now have AND/OR algebra. Inconsistent text removed.
since there were arguments for OR semantics and also AND
semantics the spec now allows the signer to choose
* Hashes now have AND/OR algebra.
for consistency only, I doubt anyone will ever care
* Clarification on signing non-value parts of a signature.
addresses Bron's sudden concern at the interim about
removing signatures. I expect implementations got this
right already but should not be crystal clear
* "Validly Signed DKIM2 Message" renamed "Fully Verified DKIM2 Message"
as a chair suggested
* IANA section added
there is no registry, if you want one argue why
* Changes to the list of ignored header fields.
Bron got two entries wrong in his draft
* Clarifications to DSN validation and constraints on creation
extremely subtle inconsistencies (and a clash with RFC5321)
have been sorted
* Multiple other improvements and corrections
I mean multiple, this has taken a lot of my time!
--
richard @ highwayman . com "Nothing seems the same
Still you never see the change from day to day
And no-one notices the customs slip away"
_______________________________________________
Ietf-dkim mailing list -- [email protected]
To unsubscribe send an email to [email protected]