On 23/09/16 16:35, Robert Blayzor wrote:
> Most importantly " if they are present in the message being signed”… but now
> it adds them to signing regardless? That certainly breaks some things (quite
> a bit), most notably when you post a message into a mailing list and
> “List-Id” is added. That completely invalidates the original DKIM signature.
... and doesn't say you can't add other things as well, including
headers not present.
Yes, DKIM breaks mailinglists...
> Is there a knob to turn this back to the original functionality and “not
> oversign” ?
Not a simple knob, no.
You could construct a non-oversigning list for dkim_sign_headers by
using a suitably complex expansion. Probably involving ${filter...}.
--
Cheers,
Jeremy
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim
details at http://www.exim.org/ ##
