Hi Erik,

The message you receive through the Cc should have a DKIM signature.

At 21:28 03-11-2008, Erik Lotspeich wrote:
>My vanity domain has a "sign all" DKIM policy.  The last message I sent to
>this list failed verification.  Here's the syslog output:

Publishing a "sign all" DKIM policy means that all mail from that 
domain is signed.  Some mailing lists, such as this one, modify the 
message body by inserting a footer.  That invalidates the DKIM 
signature.  The mailing list also removes the DKIM-Signature header.

>Nov  3 15:59:51 starfish dkim-filter[25472]: mA3LxjiJ004928 external host
>lists.sourceforge.net attempted to send as lotspeich.org
>Nov  3 15:59:51 starfish sendmail[4928]: mA3LxjiJ004928: Milter insert
>(1): header: Authentication-Results:  starfish.lotspeich.org; dkim=none
>(no signature)\n\theader.i=unknown; dkim-asp=fail
>
>I guess the "From: Erik Lotspeich <[EMAIL PROTECTED]>" in the message
>body was enough for dkim-milter to believe that lists.sourceforge.net was
>trying to send mail from my domain.

Yes.

According to your ADSP record, all messages are DKIM signed, hence 
the "dkim-asp=fail".

>I know that mailing lists and DKIM can be tricky.  It certainly is common
>for mailing lists to rewrite the From header.  Is there a good solution --
>or at least a workaround for this issue?

Mailing lists do not rewrite the From header.

There is unfortunately no workaround.  I suggest not to publish a 
"sign all" policy for messages that go through mailing lists.  You 
could use a subdomain for email addresses that require "less protection".

Regards,
-sm



-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to