On 2024-01-05 at 16:02:45 UTC-0500 (Fri, 05 Jan 2024 13:02:45 -0800)
Randy Bush via Exim-users <[email protected]>
is rumored to have said:
should psg.com have recognized that it was already properly DKIMmed
and
not added the second?
Thought experiment: what would you do in response to seeing an
unfamiliar document with your seemingly valid signature on it?
It seems to me that such an event should be alarming unless specifically
expected. Or perhaps that it is so unlikely as to be not worth looking
for. I'm not sure that looking for it in order to avoid signing it again
would fit many use cases.
It is worth noting that there are entirely valid reasons to re-sign a
message that has already been signed by a prior MTA. Mailing lists
sometimes are configured to do that.
--
Bill Cole
[email protected] or [email protected]
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
