Date:        Mon, 03 Feb 2025 19:00:28 -0500
    From:        Zeffie via Bug reports for the GNU Bourne Again SHell 
<bug-bash@gnu.org>
    Message-ID:  <875b2e87e5d847a4aa04ba2b31bec...@zeffie.com>

  | To whom it may concern,

That is most probably not anyone on this list - you'd need to contact
the list maintainers at gnu.org (and no, I have no idea how).
 
  | I wanted to bring to your attention that the bash-bug mailing list 
  | messages are being marked as spam by our spam filtering.

Spam and DKIM have almost nothing to do with each other, filtering for
spam based upon DKIM is dumb.

  | The debug headers indicate an "Invalid DKIM signature" which appears
  | to be causing the posts to be flagged.

That's because the From header is being changed by the list to work
around some other "spam protection" mechanism that lots of people seem
to believe in (some kind of check that the addr on the From header
matches the SMTP source of the message - which it almost never does
for mailing list messages).

  | This is particularly concerning because it may lead to legitimate 
  | technical discussions and patches being overlooked or misclassified by 
  | recipients.

Only by people foolish enough to use DKIM for spam filtering.

  | I suspect that the DKIM configuration for the mailing list

What makes you believe there is one?   Most messages on the list don't
carry DKIM header fields, as most users don't believe they have enough
usefulness to bother.   If you want forgery protection (which is what
it pretends to offer) send signed messages.

One day the world is going to realise that spam is a social (and perhaps
legal) issue, and not a technical one - there is no possible technical
solution that can stop spam, certainly not at the recipient (at the sender
detecting large numbers of messages being sent is a good clue in many
cases, mailing list sites excepted - but the sending site rarely has any
incentive to bother.)

  | might need to be reviewed or updated to ensure that the signatures 
  | validate correctly according to current standards.

If the list went back to leaving the From field alone, which I would
certainly prefer, DKIM would no longer fail (though there's still no
good reason for anyone to use it) but even more people get messages
rejected or classified as spam in that case.

  | I would appreciate it if someone with the appropriate authority could 
  | investigate this matter

You'd have to ask such a person, who most probably doesn't have a lot
of interest in bash bugs, and so isn't on this list.

kre


Reply via email to