On Fri, 25 Sep 2020 17:31:14 -0500 Jerry Malcolm wrote: > On 9/24/2020 8:17 AM, RW wrote:
> > In your list emails you are DKIM signing Message-Id and sending > > directly from AWS. If you are doing the same thing with SES, then > > obviously that would break DKIM. > > > > OTOH if you aren't signing Message-Id on the other mail perhaps > > doing so would discourage Amazon from overwriting the header. > > ... > SES adds it's own DKIM signing. They would still be invalidating the author signature, which isn't good. If SES is modifying Message-Id, even when it's signed, you should stop signing that header. > But I did find a horrible problem > directly related to Apache forums when proxying through SES. I can't > remember the details, but SES changes up something that makes all > apache forums not recognize me. This may be related given that the SPF for malcolms.com doesn't appear to contain the SES server.
