> mouss wrote: >>> Mailman has specific functionality to remove signature headers so >>> that the message can be resigned as it's sent out. >> >> which doesn't help, because if I get mail claiming to come "From: >> <mo...@netoyen.net>", yet it doesn't have a sig of mine, I don't >> really care if some fancy mailman owner has added his own. > > Huh? I really don't understand what you just wrote. > > "Mailman" is a mailing list management program (which is used to manage > this list, fwiw). And the signatures I was talking about are DKIM or > Domainkeys. > > Since Mailman adds it's own headers to the messages it processes, any > existing signatures in the message are invalidated. Thus, Mailman has to > remove any existing signatures and let the MTA resign the message after > it's been processed.
This is *not* correct. Check the headers of this message and check the SA test results. The list server added its headers, did not strip my DK & DKIM signatures, and SA shows that the message contains DK & DKIM signatures and that they are still valid. Headers added after signing do *not* cause a problem if they are added in the proper order, above the ones used for signing, as is the standard. Bill
