>>As long as these headers are not DKIM signed.Thats why you do DKIM-validation >>the very first thing you do. Then you can mess with the mail as your heart >>wish.If you have further servers down the line, create a header like >>X-DKIM-Origin: pass.Then have a routine which deletes all X-DKIM-Origin >>headers, and then add yours.Then you tell the servers down the line to trust >>this header for DKIM-validation.(Or if the software is stubborn: delete DKIM >>signature and then resign the mail with your key, which you tell your servers >>to trust, for example by DNS rewriting in your firewall)so DKIM isn't really >>a problem.
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop