Difference between pages "GnuPG" and "DomainKeys Identified Mail"
From Forensics Wiki
(Difference between pages)
(Initial stub) |
(New page: {{Expand}} '''DomainKeys Identified Mail''' ('''DKIM''') is a method for signing email messages to help eliminate spam. The signature in each message should give the domain (<tt>d=</tt>...) |
||
| Line 1: | Line 1: | ||
{{Expand}} | {{Expand}} | ||
| − | + | '''DomainKeys Identified Mail''' ('''DKIM''') is a method for signing email messages to help eliminate spam. | |
| + | |||
| + | The signature in each message should give the domain (<tt>d=</tt>) and selector (<tt>s=</tt>). The appropriate key can be retrived as a TXT [[Domain Name System|DNS]] record from the host <tt>''selector''._domainkey.''domain''</tt>). A sample message from Gmail had the following DKIM header: | ||
| + | |||
| + | <pre> | ||
| + | DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; | ||
| + | d=gmail.com; s=beta; | ||
| + | </pre> | ||
| + | |||
| + | We can thus retrieve the Gmail key with: | ||
| + | |||
| + | <pre>$ host -t txt beta._domainkey.gmail.com | ||
| + | beta._domainkey.gmail.com descriptive text "t=y\; k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC69TURXN3oNfz+G/m3g5rt4P6nsKmVgU1D6cw2X6BnxKJNlQKm10f8tMx6P6bN7juTR1BeD8ubaGqtzm2rWK4LiMJqhoQcwQziGbK1zp/MkdXZEWMCflLY6oUITrivK7JNOLXtZbdxJG2y/RAHGswKKyVhSP9niRsZF/IBr5p8uQIDAQAB"</pre> | ||
| + | |||
== External Links == | == External Links == | ||
| − | * [http://www. | + | * [http://www.dkim.org/ Official website] |
| − | * [http://en.wikipedia.org/wiki/ | + | * [http://en.wikipedia.org/wiki/DomainKeys_Identified_Mail Wikipedia entry on DKIM] |
Revision as of 13:21, 29 April 2007
|
|
Please help to improve this article by expanding it.
|
DomainKeys Identified Mail (DKIM) is a method for signing email messages to help eliminate spam.
The signature in each message should give the domain (d=) and selector (s=). The appropriate key can be retrived as a TXT DNS record from the host selector._domainkey.domain). A sample message from Gmail had the following DKIM header:
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed;
d=gmail.com; s=beta;
We can thus retrieve the Gmail key with:
$ host -t txt beta._domainkey.gmail.com beta._domainkey.gmail.com descriptive text "t=y\; k=rsa\; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC69TURXN3oNfz+G/m3g5rt4P6nsKmVgU1D6cw2X6BnxKJNlQKm10f8tMx6P6bN7juTR1BeD8ubaGqtzm2rWK4LiMJqhoQcwQziGbK1zp/MkdXZEWMCflLY6oUITrivK7JNOLXtZbdxJG2y/RAHGswKKyVhSP9niRsZF/IBr5p8uQIDAQAB"
