A PDS operator's declaration of cooperative membership and mail domain control. The labeling service verifies DNS configuration (MX, SPF, DKIM, DMARC) independently and applies verification labels to the operator's DID. The record key is the attested domain.
any
Any valid record key
Properties
createdAt
string
datetime
Required
An RFC 3339 formatted timestamp.
dkimSelectors
array
of
string
Required
DKIM selectors configured for this domain. The labeling service looks up DNS TXT records at <selector>._domainkey.<domain> to verify key publication.
maxLength: 10 itemsminLength: 1 itemsdomain
string
Required
The mail domain this attestation covers. Must match the record key. Domain control is verified by the labeling service via DNS (matching the DID's handle or a TXT record pointing to the DID).
maxLength: 253 bytesminLength: 1 bytesrelayMember
boolean
Optional
Whether this operator wants to participate in the cooperative relay pool. Absent means no.
View raw schema
{
"key": "any",
"type": "record",
"record": {
"type": "object",
"required": [
"domain",
"dkimSelectors",
"createdAt"
],
"properties": {
"domain": {
"type": "string",
"maxLength": 253,
"minLength": 1,
"description": "The mail domain this attestation covers. Must match the record key. Domain control is verified by the labeling service via DNS (matching the DID's handle or a TXT record pointing to the DID)."
},
"createdAt": {
"type": "string",
"format": "datetime"
},
"relayMember": {
"type": "boolean",
"description": "Whether this operator wants to participate in the cooperative relay pool. Absent means no."
},
"dkimSelectors": {
"type": "array",
"items": {
"type": "string",
"maxLength": 63,
"minLength": 1,
"description": "A DKIM selector name."
},
"maxLength": 10,
"minLength": 1,
"description": "DKIM selectors configured for this domain. The labeling service looks up DNS TXT records at <selector>._domainkey.<domain> to verify key publication."
}
}
},
"description": "A PDS operator's declaration of cooperative membership and mail domain control. The labeling service verifies DNS configuration (MX, SPF, DKIM, DMARC) independently and applies verification labels to the operator's DID. The record key is the attested domain."
}