>> I don't know anyone who's checked whether DKIM validators verify the
>> version number, but if it's an issue, there aren't that many widely
>> used DKIM engines so it wouldn't be hard to check.
>
>Just FYI, libdkim which all our products use does check the v= and if 
>it's not "v=1" verification "fails" with an "invalid v=" error which we 
>then document in the authentication-results header.

I looked at the code in Mail::DKIM which is what spamassassin and
probably every other perl DKIM application uses.  It checks the
version number, and for some reason accepts "0.5" as well as "1", but
nothing else.

The most widely used python module is Scott's dkimpy, which checks
that the version is "1".

R's,
John

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to