12/31/2012
TODO: reverse engineer Perl's Mail::DKIM::Verifier package.(rk:1/2/13)TODO: start on signing code(0.4.0)TODO: remove debugging output(rk:1/2/13)
1/2/2013
TODO: 5.4 of RFC4871; Reverse-order headers to allow for multiple instances of a signed header (e.g. Cc)(0.4.0)- TODO: Allow debugging flags for more verbosity
TODO: Figure out my damn verification problem(0.4.0 — signatures now cross-check against dkimpy in both directions)
10/9/2026
- TODO: drop the phpseclib 1.x code path in
_signatureIsValid()/_hashBody()— unreachable with phpseclib 2.x+, untested, and passes a bare base64 key toloadKey() - TODO:
l=body length tag (deliberately unimplemented; it lets an attacker append content) - TODO: ed25519-sha256 signing and verification (RFC 8463)
- TODO:
g=granularity,s=service type, and thet=ytesting flag on key records