Re: [OFF]: DKIM broken by certain email clients

[James Brown]

On 25/09/2008, at 12:01 AM, Wietse Venema wrote:

James Brown:

The flow of my email is:

Mail.app -> ASSP -> Postfix -> amavisd-new -> Postfix -> Astarto
Gateway -> Internet

I think :-)

Your mail is modified AFTER the DKIM signature is computed. Therefore,
the source of the message not breaking the signature.

However, you can use this source to send the same test message
repeatedly, and to find out what your email looks like at different
points AFTER it is signed. This will reveal what is making the
change that breaks the DKIM signature.

        Wietse

I'll have to work out how to turn off going through amavisd-new next.

James.

I sent an email from Mail.app to port 10026 of my mail server directly, so it bypassed ASSP. DKIM checks still came back saying that the signature did not match. So I can rule out ASSP.

smime.p7s
Description: S/MIME cryptographic signature