Re: DKIM, DMARC, Original-Authentication-Results

2014-04-11 Thread Alessandro Vesely
On Fri 11/Apr/2014 01:40:13 +0200 Scott Kitterman wrote: > On April 10, 2014 7:24:54 PM EDT, LuKreme wrote: >>On 10 Apr 2014, at 17:01 , Viktor Dukhovni wrote: >>> On Fri, Apr 11, 2014 at 12:57:54AM +0200, li...@rhsoft.net wrote: >>> Which, IM(ns)HO is what every list should not do. I actua

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread Viktor Dukhovni
On Thu, Apr 10, 2014 at 05:24:54PM -0600, LuKreme wrote: > > No, the DKIM spec makes no allowance for signature delimiters. If > > the body is modified beyond adding removing whitespace (with relaxed > > canonicalization) the DKIM check fails. > > That seems like a bug in the implementation of D

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread Scott Kitterman
On April 10, 2014 7:24:54 PM EDT, LuKreme wrote: > >On 10 Apr 2014, at 17:01 , Viktor Dukhovni >wrote: > >> On Fri, Apr 11, 2014 at 12:57:54AM +0200, li...@rhsoft.net wrote: >> That said, I thought DKIM ignored everything after the signature delimiter, so if the lists attach the footer

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread LuKreme
On 10 Apr 2014, at 17:01 , Viktor Dukhovni wrote: > On Fri, Apr 11, 2014 at 12:57:54AM +0200, li...@rhsoft.net wrote: > >>> That said, I thought DKIM ignored everything after the signature >>> delimiter, so if the lists attach the footer *properly* it shouldn?t >>> be an issue > > No, the DKIM

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread Viktor Dukhovni
On Fri, Apr 11, 2014 at 12:57:54AM +0200, li...@rhsoft.net wrote: > > That said, I thought DKIM ignored everything after the signature > > delimiter, so if the lists attach the footer *properly* it shouldn?t > > be an issue No, the DKIM spec makes no allowance for signature delimiters. If the bo

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread li...@rhsoft.net
Am 11.04.2014 00:53, schrieb LuKreme: > > On 10 Apr 2014, at 09:08 , Viktor Dukhovni wrote: > >> On Thu, Apr 10, 2014 at 06:03:51AM -0400, Miles Fidelman wrote: >> >>> I'm sure at least some of you have been bitten by the debacle associated >>> with Yahoo turning on strict DMARC enforcement (p

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread LuKreme
On 10 Apr 2014, at 09:08 , Viktor Dukhovni wrote: > On Thu, Apr 10, 2014 at 06:03:51AM -0400, Miles Fidelman wrote: > >> I'm sure at least some of you have been bitten by the debacle associated >> with Yahoo turning on strict DMARC enforcement (particularly any of you who, >> like me, manage a

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread Viktor Dukhovni
On Thu, Apr 10, 2014 at 06:03:51AM -0400, Miles Fidelman wrote: > I'm sure at least some of you have been bitten by the debacle associated > with Yahoo turning on strict DMARC enforcement (particularly any of you who, > like me, manage a list server). One option is to do what the Postfix-users li

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread Robert Schetterer
Am 10.04.2014 12:47, schrieb Robert Schetterer: > Am 10.04.2014 12:03, schrieb Miles Fidelman: >> Hi Folks, >> >> I'm sure at least some of you have been bitten by the debacle associated >> with Yahoo turning on strict DMARC enforcement (particularly any of you >> who, like me, manage a list server

Re: DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread Robert Schetterer
Am 10.04.2014 12:03, schrieb Miles Fidelman: > Hi Folks, > > I'm sure at least some of you have been bitten by the debacle associated > with Yahoo turning on strict DMARC enforcement (particularly any of you > who, like me, manage a list server). yes with listserver mailman, had to upgrade to ver

DKIM, DMARC, Original-Authentication-Results

2014-04-10 Thread Miles Fidelman
Hi Folks, I'm sure at least some of you have been bitten by the debacle associated with Yahoo turning on strict DMARC enforcement (particularly any of you who, like me, manage a list server). Which leads to a question: Any suggestions for how to validate a DKIM signature, and apply an Origin