>>As long as these headers are not DKIM signed.Thats why you do DKIM-validation 
>>the very first thing you do. Then you can mess with the mail as your heart 
>>wish.If you have further servers down the line, create a header like 
>>X-DKIM-Origin: pass.Then have a routine which deletes all X-DKIM-Origin 
>>headers, and then add yours.Then you tell the servers down the line to trust 
>>this header for DKIM-validation.(Or if the software is stubborn: delete DKIM 
>>signature and then resign the mail with your key, which you tell your servers 
>>to trust, for example by DNS rewriting in your firewall)so DKIM isn't really 
>>a problem.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Reply via email to