|  | Commit message (Collapse) | Author | Age | Files | 
|---|
| | |  | 
| | 
| 
| 
| 
| 
| | Instead of using the fallback key.  That way messages from our lists
have proper DMARC alignment (at least when envelope sender and From
header are under domain lists.fripost.org). | 
| | 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| | Cf. https://lists.debian.org/debian-devel-announce/2020/04/msg00004.html .  \o/
It's also fairly easy to deploy onto the Debian infrastucture:
    $ USERNAME="guilhem"
    $ SELECTOR="5d30c523ff3622ed454230a16a11ddf6.$USERNAME.user"
    $ printf "dkimPubKey: %s %s\n" "$SELECTOR" \
                "$(openssl pkey -pubin -in "./certs/dkim/$SELECTOR:debian.org.pub" -outform DER | base64 -w0)" \
        | gpg --clearsign | s-nail -r "USERNAME@debian.org" -s dkimPubKey changes@db.debian.org | 
| | 
| 
| 
| 
| | While the combination of "s=" tag (selector) & "d=" tag signing domain
maps to a unique key, the selector alone doesn't necessarily. | 
|  |  |