Hi Jose-Marcio, At 11:24 17-01-2008, Jose-Marcio Martins da Cruz wrote: >Yes ! But does the draft forbid it ? What's the draft number ?
It's draft-kucherawy-sender-auth-header-10. There's a copy in the tarball. >I'm asking that as I'd like to be able, inside my milter running just >after verifying dkim-filter, to be sure the header I'm seeing was added >by dkim-milter running in the same server, and not added by someone >other than the dkim-filter running in the same server. If I understood correctly, you want to ensure that the Authentication-Results (A-R) header was added by you server and not before that. The draft uses the authentication identifier field (authserv-id) for that. It's generally the FQDN of the server but you can change that (Section 2.3). However, queue-id may not be a valid authserv-id as you cannot guarantee uniqueness for it from a global perspective. It also leaves room for abuse. Dkim-milter will remove an A-R header with your FQDN as the authserv-id if it's part of the existing headers. See RemoveARFrom in the dkim-filter.conf manual. Regards, -sm ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
