RE: newbie question: duplicate keys to different servers

From: Murray S. Kucherawy <msk_at_cloudmark.com>
Date: Wed, 29 Feb 2012 00:28:57 +0000

DKIM verifiers ask for a key from the DNS based on where your signatures tell them to look. Would you just do DNS replication (i.e., deploy a lot of secondary servers) to spread the load for that?

I suppose you could put a rotation of keys in your outgoing signatures and have different messages ask for different keys, but presumably they’d all be in the same domain, so I’m not sure what you’d gain.

You can duplicate the private key across many servers so they can all generate valid signatures for the same public key, as long as you’re careful about how you move the keys around.

Does that answer your question?

-MSK

From: opendkim-users-bounce_at_lists.opendkim.org [mailto:opendkim-users-bounce_at_lists.opendkim.org] On Behalf Of Gabriel troisgros
Sent: Tuesday, February 28, 2012 4:14 PM
To: opendkim-users_at_lists.opendkim.org
Subject: newbie question: duplicate keys to different servers

Hello

is it possible to duplicate the keys to several servers ? i’m developping a marketing software with bluk mailing function, and i would like to load balance my sendings, so i would like my senders keys to be implemented in all my sending servers. can i just copy/paste the keys and add additionnals dns entries to have my emails signed on each servers ? or do i have to redo the config on each server ?

thank you !

Gabriel
Received on Wed Feb 29 2012 - 00:29:05 PST