[enhancement]: Auto add/update DKIM key

[onny]

Which feature or improvement would you like to request?

Since we'll already have access to the domain name system via TLS-DNS-01, it would be nice to automatically add or update the DKIM domainkey

Type: TXT
Name: mail._domainkey
Content: v=DKIM1; h=sha256; k=rsa; p=<generated DKIM key>

Would also make a good feature possible: Automatic DKIM key rotation

Is your feature request related to a problem?

I'm having a problem with...

Code of Conduct

• I agree to follow this project's Code of Conduct

[williamdes]

That makes so much sense!
But I wonder how it will work with CNAME delegation: https://www.eff.org/deeplinks/2018/02/technical-deep-dive-securing-automation-acme-dns-challenge-validation

[lic0san]

In the same move, it would also be rather convenient to auto update TLSA records after each TLS certificate renewal... and any other of the many DNS records Stalwart suggests. For each domain, there could be an option to provide RFC2136 settings and a way to select which records to keep in sync with DNS update.