In chatmail/filtermail#35, we check DKIM records via HTTPS instead of DNS. This allows federation with no-DNS relays, and could solve DNS reliability problems as well.
The HTTPS location would be: https:// <domain>/.well-known/_domainkey/opendkim. The format would be something like:
v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oO8IPpC9q2IztozdKVbsou6BOV/f09fLL16d9XQBsGwgqdRBOOALzu+KifjMKZFptMFQAlvm2x2kDq2PiaUgkwwx+pk5QhpTomjkurjFzzGrikndaVBDzeJ53B45mtodHl69vr6v9M7xNKlbZ7kUtD+a5q2nmzNd6WLSg5fZwp4iVVEyoIt+GenFZtl7Ay3ivnYl41/3HOvDVKzQCkmeIGjgPSfdxYbxpL+ywG3puZbjrSykDY4z3VZScp4FZOT4EHgeFVro+g6/7a24VOC+CguMYq0I/hXeOeXLuDnABVw/XqfzQyVJNsP9J9K4WHPmDpTWGWy5YzYY4hXdo+jvQIDAQAB;s=email;t=s
In chatmail/filtermail#35, we check DKIM records via HTTPS instead of DNS. This allows federation with no-DNS relays, and could solve DNS reliability problems as well.
The HTTPS location would be:
https:// <domain>/.well-known/_domainkey/opendkim. The format would be something like: