On Sun, 1 Mar 2009, Tony Birnseth, 1st Source IT, LLC wrote: > I have installed the 'sendmail' version of DKIM since I can't find a > lib64 binary specifically for postfix. I made links to get the key > locations to resolve and that seems to be working ok. > I created a regex file to perpend an DKIM Signature: header for every > email sent "from" this system whether that be from the system itself or > on behalf of an authenticated smtp connection (I.e one of the domains I > support)...
As I believe Mike pointed out, this isn't how DKIM works. The signature takes into account the body and header contents as well as the current time, so you can't recycle the same signature for all of your mail as none of them will ever verify (except the one on which the original signature was based). You need to sign each message individually using the filter. > I guess I would expect the "checker" to: > 1) Use the info in the header to check the dkim info (I.e. > ezms1._domainkey.ez-merchant-hosting.com) > 2) Validate against those credentials. It does, but the digital signature is based on the message content and headers, which (obviously) changes from one message to the next. Also the "t=" portion of the signature is a timestamp, so eventually you'd be affixing signatures generated before the actual message you're sending. > I'm trying to avoid setting up unique dkim info for each client that > uses this system. Maintenance nightmare. Is that even possible? Absolutely. ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ dkim-milter-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss
