Am Montag, 11. Juni 2007 19:29 schrieb Murray S. Kucherawy: > On Mon, 11 Jun 2007, Michael Schwartzkopff wrote: > > Perhaps I do not understand the process of verification according to > > dkim-milter. As far as I thought dkim-milter would add something like: > > > > X-DKIM-Authentication-Results: none > > > > if there is no signature is present. Am I wrong here? > > Yes; as I mentioned in an earlier message, logging "no signature" and > adding a header to every unsigned message just creates a lot of logging > and I/O that's not really of interest. > > As a matter of fact, a bug was opened against dkim-milter in March of this > year complaining that we were adding the header and the logging that > you're requesting, so I removed it then. (See SourceForge bug #1605766, > fixed in v0.6.1.) > > > Is it possible to configure dkim-milter to work that way? > > Not at present. If you like, open a feature request on SourceForge and > I'll try to get it into a future version. However, I'm left wondering why > your filtering software can't treat the absence of an > Authentication-Results: header as an indication that the message was > unsigned. > > > Does dkim-milter only add a "X-DKIM-Authentication-Results" header if a > > signature existed? > > It adds that header: > > a) if the message was signed; or > b) if the message was not signed and the sending domain's policy claims to > sign everything. > > The second point here is a bit poorly-defined because DKIM doesn't have a > sender signing policy yet. dkim-milter just implements what DomainKeys > did for now. > > -MSK
Hi, thanks for you explanations. I do understand the process of dkim-milter a little bit more. You are absolutely right, that (except for debugging purposes) the log file should be kept as clean as possbile. On the other hand it might be a good idea to introduce an optionial feature that adds a X-DKIM_Authentication-Result Header in any case. In the absense of a signature the contents of that header would be "none". It is more logic to filter for an existing header than searching for the absense of something. This feature should be optional and not switched on by default. So everybody who wants this feature could enable that option. Thank you very much indeed for your explanations again. -- Dr. Michael Schwartzkopff MultiNET Services GmbH Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany Tel: +49 - 89 - 45 69 11 0 Fax: +49 - 89 - 45 69 11 21 mob: +49 - 174 - 343 28 75 mail: [EMAIL PROTECTED] web: www.multinet.de Sitz der Gesellschaft: 85630 Grasbrunn Registergericht: Amtsgericht München HRB 114375 Geschäftsführer: Günter Jurgeneit, Hubert Martens --- PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B Skype: misch42 ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
