Namespace DRIT.Mail.Rfc.Dkim

Classes

DkimDnsKeyResolver

Default DNS-based DKIM key resolver (RFC 6376 §3.6). Queries the TXT record at <selector>._domainkey.<domain> and parses the response.

DkimException

Thrown when a DKIM structure cannot be parsed, signed, or verified.

A parsed DKIM key record from DNS (RFC 6376 §3.6.1). The record is stored as a TXT record at <selector>._domainkey.<domain> and contains tag-value pairs describing the public key and its constraints.

DkimSignatureHeader

A parsed DKIM-Signature header (RFC 6376 §3.5). The header value is a semicolon-separated list of tag=value pairs. Tags are short alphanumeric strings. Whitespace is allowed around semicolons and equals signs.

DkimSignatureResult

Result of DKIM verification for a single signature (RFC 6376 §6).

DkimSigner

Signs messages with DKIM (RFC 6376 §5). The signer adds a DKIM-Signature header to a message by computing the body hash, canonicalizing the signed headers, and signing the result with an RSA private key.

DkimSignerOptions

Options for DKIM signing (RFC 6376 §5).

DkimVerificationResult

Result of DKIM verification for a message (RFC 6376 §6). A message may contain multiple DKIM-Signature headers; each is verified independently.

DkimVerifier

Verifies DKIM signatures (RFC 6376 §6). The verifier finds all DKIM-Signature headers in a message, retrieves the public key from DNS, recomputes the body hash and header hash, and verifies the RSA signature.

Interfaces

IDkimKeyResolver

Resolves DKIM public keys from DNS (RFC 6376 §3.6). Implementations retrieve the TXT record at <selector>._domainkey.<domain> and parse it into a DkimKeyRecord.