[PR] Implemented: Add DKIM signing for outgoing SMTP mail (OFBIZ-13488) [ofbiz-framework]

["mridulpathak (via GitHub)" <gi...@apache.org>]

mridulpathak opened a new pull request, #1612:
URL: https://github.com/apache/ofbiz-framework/pull/1612

   OFBiz's outgoing mail (EmailServices.sendMail) was never cryptographically signed, so receiving mail servers had no way to verify a message actually came from the sending domain. This adds DKIM (RFC 6376) signing via org.simplejavamail:utils-mail-dkim, hooked in right before the transport's sendMessage call. Signing config lives in a new MailDkimConfig entity (domain, selector, PKCS#8 PEM private key, enabled flag), encrypted at rest. Signing fails open on config/key errors -- a missing or invalid config sends the message unsigned rather than blocking mail. A companion getDkimDnsRecord service derives the DNS TXT record value an admin needs to publish, from the same stored key.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Implemented: Add DKIM signing for outgoing SMTP mail (OFBIZ-13488) [ofbiz-framework]

["mridulpathak (via GitHub)" <gi...@apache.org>]

mridulpathak merged PR #1612:
URL: https://github.com/apache/ofbiz-framework/pull/1612


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@ofbiz.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org