As stated by Atro, I want to confirm that my goal is exactly to do what many 
international ESPs are already doing: use a double DKIM signature, one for the 
customer’s domain and one for the ESP domain.


If you want two signatures that is still easily done the wildcard way. Without 
needing SQL or hard coding domains in config or flat files.


/etc/opendkim.conf:
  MultipleSignatures yes


/etc/opendkim/SigningTable:
  * catchall
  * esp_signature


/etc/opendkim/KeyTable:
  catchall  %:selector_name:/etc/opendkim/keys/key_xxxxxxxx.private
  esp_signature 
esp_domain.com:selector_name:/etc/opendkim/keys/key_xxxxxxxx.private


Either sharing the same key or setting up separate keys for each role.

And despite popular assumption, I'm not FORCING you to do ANYTHING. You are 
free to ignore all of this and do it any way you like. In my experience people 
sometimes ask a question to a step they think is necessary for their end goal. 
Sometimes you can give them an answer that gets them to their goal that doesn't 
answer their exact question, because they don't need to actually do what they 
are asking.


_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to