On 2023-03-26 12:37 am, Benny Pedersen via Postfix-users wrote:
Peter via Postfix-users skrev den 2023-03-26 06:15:
DKIM and ARC signatures need to be checked right after the message is
received,
not really, all that is needed is to frezze stata of dkim, arc, dmarc
at recieve state, when this is frezzed in arc, then downstreams can
trust it or dont care :)
new signatures need to be generated right before the message
is sent,
not really, this stage would be waste of resources
any changes to the message need to be done in-between, all of
this regardless of however else you set up the system. I would think
that this would be obvious.
majordomo did not break dkim, dovecot maillist still dont, and are
still using mailman, thumps up, it works
https://datatracker.ietf.org/person/jo...@taugh.com good references
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
I am part of that list and I would beg to differ. Try setting your DMARC
to "p=reject" -- which works with most everyone and should be the policy
one uses to actually gets the benefits of a proper DMARC setup.
I did, for a while, and then had to submit an email recently and got
the email rejected by many of the recipients after it went through the
mailing list. The tsunami of forensic emails alone was enough to tell
me that your statement is not _entirely_ correct. IF the policy is set
to none, then yeah, you're right. The dovecot list has an easier time
getting around than this one, but its only a matter of time before
things are figured out and changed accordingly.
DKIM/SPF/DMARC were created to work with legitimate mail and to help
detect (and possibly reject) mail that is forged or modified by a
third party. That is what mailing lists do.
No mailing list that does mangling will do DKIM properly UNLESS, as
suggested before, mail is signed by the ML server after mangled.
--
Elisamuel Resto <s...@samresto.dev>
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
