On 07-13-2021 3:34 pm, Viktor Dukhovni wrote: FWIW, there is no such thing as "DKIM enforcement", you're probably thinking of DMARC.
Maybe its technically called DMARC, but what im referring to is the opendkim verification mode with a On-BadSignature reject policy. My layman's term of "DKIM enforcement" is in reference to opendkim enforcing dkim signatures to be valid to have mail accepted. Since message forwarding can break signatures i wanted to give people the choice to enforce dkim or not without the drama of teaching them how to manage sieve scripts. Plus id prefer a rejected delivery vs mail being discarded into the void. I will continue to explore options.
