Wez Furlong 88fd825be4 dkim: add cfdkim as a runtime alternative RSA signer ...

The mail-auth crate doesn't support 1024 bit RSA keys, which are
currently the dominant size of key used by senders at scale.

It is not possible to even configure a 2048 bit RSA key in some DNS
providers, which blocks widespread adoption of larger key sizes.

This commit pulls in the cfdkim crate as an alternative implementation.

I'm not happy with this implementation because the API of the crate
defeats some caching optimizations, doesn't support certain signing
attributes that are supported by mail-auth and the generated header isn't
nicely wrapped.

We'll likely "do something" to resolve this in a future commit.

For now, this implementation is enabled by setting `use_cf = true`
in the signing parameters.

2023-06-08 14:29:19 -07:00

..

address.rs

add functions for working with address headers

2023-03-14 18:53:47 -07:00

dkim.rs

dkim: add cfdkim as a runtime alternative RSA signer

2023-06-08 14:29:19 -07:00

lib.rs

refactor: move arf and bounce report parsing to kumo-log-types

2023-03-12 20:16:05 -07:00

message.rs

dkim: add cfdkim as a runtime alternative RSA signer

2023-06-08 14:29:19 -07:00

scheduling.rs

fix code formatting

2023-03-01 09:45:22 -07:00