mirror of
https://github.com/mailscope/kumomta.git
synced 2026-09-10 04:22:13 +00:00
Wez Furlong
88fd825be4
The mail-auth crate doesn't support 1024 bit RSA keys, which are currently the dominant size of key used by senders at scale. It is not possible to even configure a 2048 bit RSA key in some DNS providers, which blocks widespread adoption of larger key sizes. This commit pulls in the cfdkim crate as an alternative implementation. I'm not happy with this implementation because the API of the crate defeats some caching optimizations, doesn't support certain signing attributes that are supported by mail-auth and the generated header isn't nicely wrapped. We'll likely "do something" to resolve this in a future commit. For now, this implementation is enabled by setting `use_cf = true` in the signing parameters.