Hi,I meant that browsers don't let one use some native API to make DNS requests that follow local policies and configuration.
Using DoH for this works, but I see obstacles in using that on a larger scale in a web email client.
People probably wouldn't like their web email client sending requests to CloudFlare about their emails or having to configure their web client's resolver. Nor would they like to get accused of bypassing some corporate DNS for example.
So some alternative approach that would pass on this trust or the required information for establishing this trust in a more universal way would be preferable.
Best, Taavi On 06.11.2026 21:24, Bron Gondwana wrote:
Huh? https://dkim2.com/verify/ Pure javascript using DoH requests to verify. Bron. On Fri, Nov 6, 2026, at 22:39, Taavi Eomäe wrote:On 06.11.2026 13:59, Bron Gondwana wrote: > Sure the keys better still be in DNS; but if you download quickly they > will be. Browsers don't allow that though. _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected] *Attachments:* * smime.p7s-- Bron Gondwana, CEO, Fastmail Pty Ltd / Fastmail US LLC [email protected] _______________________________________________ Ietf-dkim mailing list [email protected] To unsubscribe send an email [email protected]
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
