Hi, > mailman breaks dkim, its not yahoo's fault
I've been arms-wrestling a group mail service with just that type of problem today! and found an easy way out: I found that DKIM signature correctness was retained when the sender included [listname] in the Subject: on their initial message, to avoid modification of the (signed) Subject: header by the groupware. I suspect the same would work with MailMan. > if dkim was never breaked by silly maillists software the problem with > dmarc reject policy is gone > > possible i am unfair now ? :=) You have the DMARC WG on your side... they are drafting ARC to re-sign emails. MailMan could also re-sign, of course. In fact, I read that MailMan already does ARC. [Meanwhile I cannot see all those simplistic mail forwarders adopt this solution.] @Tom, to get back to your original question, a plain & simple mailing list is a bed of nails... even when you do it really nicely, perhaps even still when you canonicalise remote users to local addresses as in http://internetwide.org/blog/2017/08/16/mail-route-filtering.html Cheers, -Rick