Package: lists.debian.org
Severity: normal
X-Debbugs-Cc: deb...@rocketjump.eu

Hi,

when sending a malformed mail to a mailing list requiring a valid PGP signature,
the replay cache will add signature to the cache, but then get rejected in a
later step.

This results in any later attempts to send the signed mail to silently fail
(#1050906), even though it would otherwise have a valid signature and be
correctly formed.

It would be nice if the signature verification check would be last in the milter
list to mitigate this issue.

Regards,
Lee

Reply via email to