Hacker News Reader

DKIM is great but the keys need to be rotated at some interval. Most services will setup a CNAME so they can do this for you at least these days.

I'm a big fan of rotating keys monthly just to force automation. Maybe that's the answer?

I think that’s a great idea. When it comes to DKIM keys, since there’s no expiration it’s very common for manually managed to be setup and forgotten.