Hello Borislav, my first guess is that this is occurring with messages where there are two DKIM signatures, and one passes while the other does not. Is it possible that the environment is double-signing in some instances? It looks like the message you sent to the list was signed only once, with a 1024-bit key default._domainkey.thevenusproject.com
It that’s not a possibility I’ll have to take a look at more raw policy files to see if this is a problem in a wider range of reports from Google. Regards, —Tomki -----Original Message----- From: dmarc-discuss <[email protected]> on behalf of The Venus Project via dmarc-discuss <[email protected]> Reply-To: The Venus Project <[email protected]> Date: Saturday, September 5, 2015 at 13:50 To: <[email protected]> Subject: [dmarc-discuss] Two DKIM sections in the DMARC report from Google >Hi, > >I see something strange in the DMARC reports that we're getting from >Google. Here is the relevant section from the XML file: > > <record> > <row> > <source_ip>109.73.224.155</source_ip> > <count>10</count> > <policy_evaluated> > <disposition>none</disposition> > <dkim>pass</dkim> > <spf>pass</spf> > </policy_evaluated> > </row> > <identifiers> > <header_from>thevenusproject.com</header_from> > </identifiers> > <auth_results> > <dkim> > <domain>thevenusproject.com</domain> > <result>pass</result> > </dkim> > <dkim> > <domain>thevenusproject.com</domain> > <result>fail</result> > </dkim> > <spf> > <domain>thevenusproject.com</domain> > <result>pass</result> > </spf> > </auth_results> > </record> > > > >As you can see, it seems to check DKIM two times - one time it passes >and one time it fails. I am kinda baffled by this. There is only one >DKIM section in the reports that we're getting from Microsoft and Yahoo. >Also, we have only one DKIM DNS record set up for thevenusproject.com. > >Does anyone have any idea why this double checking of DKIM (with >different results) is happening with Google? > >Thanks in advance, >Borislav > >_______________________________________________ >dmarc-discuss mailing list >[email protected] >http://www.dmarc.org/mailman/listinfo/dmarc-discuss > >NOTE: Participating in this list means you agree to the DMARC Note Well >terms (http://www.dmarc.org/note_well.html) _______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
