# Sender expr     Domain         Selector  Signing key                     Signature settings (optional)
# (DESIGN SKETCH, NOT IMPLEMENTED YET)

# key identifier references key in signing_keys
example.org       example.org    2021      2021
further.com       further.com    2021      inlinekey

# same key identifier can be used for different selector/domain combinations
example.org       example.org    2021      2021
example.com       x.example.com  2021x     2021

# inline specification of key location and optional per-signature settings:
*.example.com     example.com    2020r     </etc/dkimkeys/2020r.private    </etc/dkim-milter/per_sig.conf

# match only subdomains:
*.example.com     example.com    2020r     </etc/dkimkeys/2020r.private    </etc/dkim-milter/per_sig.conf

# match domain and subdomains:
.example.com      example.com    2020r     </etc/dkimkeys/2020r.private    </etc/dkim-milter/per_sig.conf

# match full email address:
what+*@example.com example.com   2020r     2021

# use matched domain name as d= domain (syntax?):
*.example.com     {domain}       2020e     </etc/dkimkeys/2020e.private

# specific, priority entry overrides, ie discards also matching overly general match when prefixed with <n>:
# (if <n> were not used then for the most specific sender all entries would match => 3 signatures)
.com                  {domain} 2000  generalschluessel
<2>some.example.com   {domain} dkim2 sonderschluessel
<1>z@some.example.com {domain} dkim1 vipschluessel
# here x@example.com uses key 1, x@some.example.com uses only key 2, x@some.example.com uses only key 3

# sign for domain except for exempt sender:
exam.com {domain} sel key
!outsider@exam.com
