You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
* DNSControl contains a `DKIM_BUILDER` which can be used to simply create
837
-
* DKIM policies for your domains.
836
+
* DNSControl contains a `DKIM_BUILDER` helper function that generates DKIM DNS TXT records according to RFC 6376 (DomainKeys Identified Mail) and its updates.
* * `servicetypes:` Record-applicable service types (optional)
892
-
* * `note:` Note field `n` for admins. Avoid if possible to keep record length short. (optional)
893
-
* * `ttl:` Input for `TTL` method (optional)
894
-
*
895
-
* ### Caveats
882
+
* ## Parameters
896
883
*
897
-
* * DKIM (TXT) records are automatically split using `AUTOSPLIT`.
884
+
* * `selector` (string, required): The selector subdividing the namespace for the domain.
885
+
* * `pubkey` (string, optional): The base64-encoded public key (RSA or Ed25519). Default: empty (key revocation or non-sending domain).
886
+
* * `label` (string, optional): The DNS label for the DKIM record. Default: `@`.
887
+
* * `version` (string, optional): DKIM version. Maps to the `v=` tag. Default: `DKIM1` (currently the only supported value).
888
+
* * `hashtypes` (array, optional): Acceptable hash algorithms for signing. Maps to the `h=` tag.
889
+
* * Supported values for RSA key:
890
+
* * `sha1`
891
+
* * `sha256`
892
+
* * Supported values for Ed25519 key:
893
+
* * `sha256`
894
+
* * `keytype` (string, optional): Key algorithm type. Maps to the `k=` tag. Default: `rsa`. Supported values:
895
+
* * `rsa`
896
+
* * `ed25519`
897
+
* * `notes` (string, optional): Human-readable notes intended for administrators. Pass normal text here; DKIM-Quoted-Printable encoding will be applied automatically. Maps to the `n=` tag.
898
+
* * `servicetypes` (array, optional): Service types using this key. Maps to the `s=` tag. Supported values:
899
+
* * `*`: explicity allows all service types
900
+
* * `email`: restricts key to email service only
901
+
* * `flags` (array, optional): Flags to modify the interpretation of the selector. Maps to the `t=` tag. Supported values:
902
+
* * `y`: Testing mode.
903
+
* * `s`: Subdomain restriction.
904
+
* * `ttl` (number, optional): DNS TTL value in seconds
905
+
*
906
+
* ## Related RFCs
907
+
*
908
+
* * RFC 6376: DomainKeys Identified Mail (DKIM) Signatures
909
+
* * RFC 8301: Cryptographic Algorithm and Key Usage Update to DKIM
910
+
* * RFC 8463: A New Cryptographic Signature Method for DKIM (Ed25519)
0 commit comments