Gomes, Rich via Postfix-users:
> - This was reported wth a RUF report (DKIM signature check failed,
> new selector). This suggests that they don't have a matching public
> key in the DNS.
>
> Correct.
> We have never received a new selector notification that we did not add
> ourselves.
> We are trying to reproduce what likely caused it.
Anyone can forge a DKIM-Signature: header with good d= tag and bad
s= tag. This does not require header injection, header splitting,
or other trickery.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
