>I had not noticed -- and still don't quite understand -- what it is
>about the new stuff that will cause a legacy engine to fail the
>signature validation.

It's in section 3.5 of RFC 6376, the part about the DKIM-Signature
header, where it says:

   v= Version (plain-text; REQUIRED).  This tag defines the version of
      this specification that applies to the signature record.  It MUST
      have the value "1" for implementations compliant with this version
      of DKIM.

      ABNF:

      sig-v-tag       = %x76 [FWS] "=" [FWS] 1*DIGIT

         INFORMATIVE NOTE: DKIM-Signature version numbers may increase
         arithmetically as new versions of this specification are
         released.

People have looked at the code in most existing DKIM verifiers to see
whether the code matches the spec, and the current code does indeed
reject signatures that don't start with v=1.

R's,
John

_______________________________________________
dmarc mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to