Hi,

> mailman breaks dkim, its not yahoo's fault

I've been arms-wrestling a group mail service with just that type of
problem today! and found an easy way out:

I found that DKIM signature correctness was retained when the sender
included [listname] in the Subject: on their initial message, to avoid
modification of the (signed) Subject: header by the groupware.  I
suspect the same would work with MailMan.

> if dkim was never breaked by silly maillists software the problem with
> dmarc reject policy is gone
>
> possible i am unfair now ? :=)

You have the DMARC WG on your side... they are drafting ARC to re-sign
emails.  MailMan could also re-sign, of course.  In fact, I read that
MailMan already does ARC.  [Meanwhile I cannot see all those simplistic
mail forwarders adopt this solution.]


@Tom, to get back to your original question, a plain & simple mailing
list is a bed of nails... even when you do it really nicely, perhaps
even still when you canonicalise remote users to local addresses as in

http://internetwide.org/blog/2017/08/16/mail-route-filtering.html


Cheers,
 -Rick

Reply via email to