On 26 Jan 2022, at 17.14, Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:
Altering the body or headers at all (whch lists do) will often break the
hashing. For this reason, most recent versions of mailman have an option
to rewrite your mail from:
On 26.01.22 17:30, Sten Carlsen wrote:
When the dkim is set up, you can select which parts of the header you want
to include in the signature.
this is not possible for body: modification of body (which this list does)
will always break DKIM signatures.
modifying list of headers to sign should be done carefully, to avoid
either breaking and faking.
I have selected a smaller part of the headers for my signature, so does
this go through?
since domain s-carlsen.dk don't have dmarc policy, mailman does not care and
leaves dkim as is (broken) as described below.
...but only in the event you have a restrictive DMARC policy.
this explains why both your and Benny's mail did fail here, while Eduard's
did not - that one was signed by mailman because of his domains' restrictive
policy.
however, this discussion should be probably closed as it's not anymore
related to this mailing list operatiorns.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I'm not interested in your website anymore.
If you need cookies, bake them yourself.
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
ISC funds the development of this software with paid support subscriptions.
Contact us at https://www.isc.org/contact/ for more information.
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
