On Sun, May 12, 2024 at 03:59:27AM +0200, Steffen Nurpmeso via Postfix-users
wrote:
> Well here i am indeed back again, to announce
>
> v0.6.1, 2024-05-12:
> - Adds the algorithm big_ed-sha256 which effectively is RFC 8463
> (aka ed25519-sha256), but performs three digest operations where
> only two are needed.
> We keep our two-digest ed25519-sha256 "as-is".
> (If the big players do not start to support RFC 8463 by fall 2024,
> i will propose a draft xed25519-sha256 which changes the algorithm
> accordingly.)
>
> Ie, the ed25519 keys etc can remain the same and everything, but
> in order to generate ed25519 keys as of RFC 8463, use
> "key big_ed-sha256" instead of "key ed25519-sha256".
> This gives DKIM success for you.
This is not a productive direction. Please implement only algorithms
that are specified in a published standards track RFC. Nobody benefits
from ad-hoc non-interperable DKIM signature schemes that just create
confusion.
Your "big_ed-sha256" is just a correct implementation of "ed25519-sha256",
and should be the only choice offered.
--
Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
