Petr, > for mail coming from local domain I have in my amavisd.conf > "smtpd_discard_ehlo_keywords => ['8BITMIME']" as suggested in README for > DKIM. When I use my user certificate to sign mail and the mail is > encoded in 8bits, then recoding to 7bits on mailserver break MIME > signature. Is this "correct" behavior according to the standards or > something bad is happening when the mail is converted from 8bit to 7bit > (I don't have any problem with MIME signatures when the mail is send in > 7bit encoding)? (I use thunderbird->postfix->amavis->postfix->thunderbird)
I don't know whether S/MIME signature applies to encoded message (QP / B64) or to a message prior to encoding (or after being decoded), and whether it is supposed to survive encoding conversion - likely not. Postfix is just doing its job of converting 8bit MIME to 7-bit. It it weren't your own Postfix, it could have been a mailer at the recipient's site or somewhere inbetween, e.g. a mailing list. It it is true that S/MIME does not survive QP-encoding, it would be prudent to configure MUA to convert to 7-bit prior to signing, if that is possible. Someone more knowledgable in S/MIME may have a better answer. Mark ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
