It appears that Barry Leiba  <barryle...@computer.org> said:
>> Is “generally” true here? I think I have seen exceptions to DKIM signatures 
>> being valid on relayed
>> messages, although I can’t dig up any examples right now.
>
>You seem to be answering the question you're asking.  I know of none
>of these relays that break DKIM signatures, but we hear that some do.

FYI, the IETF's mail relay for role accounts like WG chairs breaks
DKIM signatures. It's a bug, but it took quite a while to realize what
the problem was, since some signatures get through OK. It's an old
python library helpfully tidying up the message headers.

Fixing the bug is nontrivial due to the cruftiness of the surrounding
code. See tools-discuss for way more details.

In theory relays shouldn't break DKIM, in practice ...

R's,
John

_______________________________________________
dmarc mailing list
dmarc@ietf.org
https://www.ietf.org/mailman/listinfo/dmarc

Reply via email to