Knowledge base

selector verifiedimportantWritten by the Hub

Selector

The label that tells a receiver which DNS record holds the public key for this signature.

In detail

Appears in the signature as s= and in DNS as <selector>._domainkey.<domain>. Because the selector is part of the record name, rotating a key means publishing a new selector rather than replacing a record — which is what makes rotation possible without a gap.