On Fri, May 1, 2015 at 8:55 AM, Anne Bennett <[email protected]> wrote:
> > Franck Martin <[email protected]> writes: > > Note that postfix/sendmail can DKIM sign the bounces it creates. > > A few weeks ago I searched for documentation on how to make > Sendmail sign its bounces, and I failed to find anything. > If you could point me at any document at all as a starting > point for that, I'd be grateful. DKIM signing in sendmail is done via its milter API, which is instantiated only when traffic arrives via SMTP. DSNs are generated and queued internally, not via SMTP. Thus sendmail does not sign its bounces. The only way to do that would be to have the sendmail instance generating the DSN route the DSN through a second MTA on its way out, and that second one would do the signing. I have no idea if any of that is true for postfix, but I believe it has hooks for calling milter APIs even for non-SMTP messages. -MSK
_______________________________________________ dmarc mailing list [email protected] https://www.ietf.org/mailman/listinfo/dmarc
