On 2024-07-22 at 18:58:41 UTC-0400 (Tue, 23 Jul 2024 00:58:41 +0200)
Ralph Seichter via Postfix-users <[email protected]>
is rumored to have said:
Adding *new* headers can't break existing DKIM signatures, because
these
headers cannot have been signed before. New in this case means header
names (not values) which have not been present before.
This is not always true. Some systems are configured to "oversign"
headers, essentially signing the non-existence. Any addition of headers
that are oversigned will break a DKIM signature. Some ill-advised
systems oversign List-* headers on every message.
--
Bill Cole
[email protected] or [email protected]
(AKA @[email protected] and many *@billmail.scconsult.com
addresses)
Not Currently Available For Hire
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
