What is ARC-Seal key rotation?

ARC Seal key rotation is the process of replacing the cryptographic keys used to sign ARC Seal headers. Forwarders and mailbox providers periodically rotate these keys to maintain security.

Rotation involves:

creating a new selector

publishing a new DNS record

transitioning signing to the new key

retiring the old key after safe propagation

This ensures the forwarding chain remains trustworthy.

Was this answer helpful?

Thanks for your feedback!