[exim] autoreply and DKIM signature ?

2024-08-14 Thread Kurt Jaeger via Exim-users
Hi! Recently, I came upon a problem without a solution: If I trigger an autoreply (for example because of vacations), how do I get the system to add a DKIM-header for the proper domain ? This post describes that the recipient of the autoreply can check the signature by looking for the d= field i

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Jeremy Harris via Exim-users
On 14/08/2024 14:31, Kurt Jaeger via Exim-users wrote: The problem is that the autoreply driver looses the information on which sender is used to send out the mail (envelope-from is <> to avoid mail-loops). More to the point, there *is no* sender. It is your choice what to use for a domain for

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Kurt Jaeger via Exim-users
Hi! > On 14/08/2024 14:31, Kurt Jaeger via Exim-users wrote: > > The problem is that the autoreply driver looses the information > > on which sender is used to send out the mail (envelope-from is <> > > to avoid mail-loops). > > More to the point, there *is no* sender. I understand, this avoids

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Jeremy Harris via Exim-users
On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: So: user1@domain1 has an autoreply, and the autoreply should be signed with dkim for domain1. I do not agree. The DKIM RFC says that anyone can sign a message. -- Cheers, Jeremy -- ## subscription configuration (requires account): ##

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Chris Siebenmann via Exim-users
> On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: > > So: user1@domain1 has an autoreply, and the autoreply > > should be signed with dkim for domain1. > > I do not agree. > The DKIM RFC says that anyone can sign a message. As a practical matter, we[*] have observed GMail rejecting email me

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Kurt Jaeger via Exim-users
Hi! > > On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: > > > So: user1@domain1 has an autoreply, and the autoreply > > > should be signed with dkim for domain1. > > > > I do not agree. > > The DKIM RFC says that anyone can sign a message. > > As a practical matter, we[*] have observed GMa

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Andreas Metzler via Exim-users
On 2024-08-14 Chris Siebenmann via Exim-users wrote: > > On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: > > > So: user1@domain1 has an autoreply, and the autoreply > > > should be signed with dkim for domain1. > > I do not agree. > > The DKIM RFC says that anyone can sign a message. > As

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Chris Siebenmann via Exim-users
> On 2024-08-14 Chris Siebenmann via Exim-users > wrote: > > > On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: > > > > So: user1@domain1 has an autoreply, and the autoreply > > > > should be signed with dkim for domain1. > > > > I do not agree. > > > The DKIM RFC says that anyone can sign

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Chris Siebenmann via Exim-users
> > As a practical matter, we[*] have observed GMail rejecting email > > messages with claims that they are doing so because the DKIM signature > > domain didn't match the From: domain. After observing this, we switched > > to signing messages with a domain that matched the From: (and generally > >

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Kurt Jaeger via Exim-users
Hi! > On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: > > So: user1@domain1 has an autoreply, and the autoreply > > should be signed with dkim for domain1. > > I do not agree. > The DKIM RFC says that anyone can sign a message. Maybe signing it with some other domain works. Still the ques

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Kurt Jaeger via Exim-users
Hi! > Maybe signing it with some other domain works. Still the question > is: Can it also be signed with the domain one *wants* to use > for this kind of autoreply ? > > Would it hurt to implement a mechanism for this ? > > How does autoreply know which mail-from it should use ? > > I found thi

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Julian Bradfield via Exim-users
On 2024-08-14, Jeremy Harris via Exim-users wrote: > On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: >> So: user1@domain1 has an autoreply, and the autoreply >> should be signed with dkim for domain1. > > I do not agree. > The DKIM RFC says that anyone can sign a message. Yes, but it also

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Kurt Jaeger via Exim-users
Hi! > On 2024-08-14, Jeremy Harris via Exim-users wrote: > > On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: > >> So: user1@domain1 has an autoreply, and the autoreply > >> should be signed with dkim for domain1. > > > > I do not agree. > > The DKIM RFC says that anyone can sign a message.

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Heiko Schlittermann via Exim-users
Kurt Jaeger via Exim-users (Mi 14 Aug 2024 15:31:35 CEST): > The problem is that the autoreply driver looses the information > on which sender is used to send out the mail (envelope-from is <> > to avoid mail-loops). Maybe I'm a bit naіv here. I'd set the From: of the autoreply to a sensible val

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Slavko via Exim-users
Dňa 14. augusta 2024 20:58:37 UTC používateľ Heiko Schlittermann via Exim-users napísal: >IMHO DMARC requires from: <-> DKIM alignment too, plus from: <-> >mail-from alignment, as someone else pointed out in this thread already. AFAIK success DMARC requires: (dkim AND align d= with MIME_Fro

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Viktor Dukhovni via Exim-users
On Wed, Aug 14, 2024 at 08:25:30PM +0100, Julian Bradfield via Exim-users wrote: > > I do not agree. > > The DKIM RFC says that anyone can sign a message. > > Yes, but it also says very clearly that it's up to the Identity > Assessor to decide what, if any, trust to place in a message signed by >

[exim] Re: autoreply and DKIM signature ?

2024-08-14 Thread Cyborg via Exim-users
Am 14.08.24 um 15:31 schrieb Kurt Jaeger via Exim-users: Hi! Recently, I came upon a problem without a solution: If I trigger an autoreply (for example because of vacations), how do I get the system to add a DKIM-header for the proper domain ? Because of the <> envelope-from, how can the prop