[Mailman-Developers] X-Mailman-Original-DKIM-Signature

2021-04-15 Thread Stephen J. Turnbull
Alessandro Vesely writes:

 > I discovered this just today, after a list I'm subscribed to enabled it.
 > 
 > I have a filter which tries to validate original signatures by
 > removing footers and subject tags.  Removing "X-Mailman-Original-"
 > is going to be the next addition.

You mean removing that substring from the field names?  Should allow
more successful validations, I guess.

 > I guess the purpose of this option is to spare a dkim=fail result
 > in the recipient's header.  However, for documentation purposes[*],
 > I'd be comforted by some document, discussion, or even a crispy
 > comment about the intended usefulness of masking existing
 > signatures.  Google found nothing.  Any pointer?

The unvalidated and unsigned X-Mailman-Original-OAR field seems like a
bad idea to me -- there's a reason why the ARC protocol is so finicky.
Anyway, it's superseded by ARC.  The others are harmless, I guess, and
useful to you.

The purpose of removing signatures that Mailman's decorations will
break has been discussed occasionally on these lists.  The problem
that it tries to solve is admins who think they're smarter than the
IETF and rate messages with failed signatures as *more* spammy than
messages with no signature, and end up rejecting list traffic for that
reason.  I guess Jim's patch to move them to X-Mailman-Original-*
fields is intended to preserve the signature for your use.

I thought only Guido van Rossum had a time machine!


Footnotes: 
[1]  I can think of a couple possibilities, but they've all been
superseded by IETF standardized fields.

___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9


[Mailman-Developers] X-Mailman-Original-DKIM-Signature

2021-04-15 Thread Alessandro Vesely

Hi,

I discovered this just today, after a list I'm subscribed to enabled it.

I have a filter which tries to validate original signatures by removing footers 
and subject tags.  Removing "X-Mailman-Original-" is going to be the next addition.


I guess the purpose of this option is to spare a dkim=fail result in the 
recipient's header.  However, for documentation purposes[*], I'd be comforted 
by some document, discussion, or even a crispy comment about the intended 
usefulness of masking existing signatures.  Google found nothing.  Any pointer?



TIA
Ale
--

[*] I try and document that original signature validation here:
https://tools.ietf.org/html/draft-vesely-dmarc-mlm-transform




















___
Mailman-Developers mailing list -- mailman-developers@python.org
To unsubscribe send an email to mailman-developers-le...@python.org
https://mail.python.org/mailman3/lists/mailman-developers.python.org/
Mailman FAQ: https://wiki.list.org/x/AgA3

Security Policy: https://wiki.list.org/x/QIA9