Hi all,

The gnome mailman server doesn't seem to handle dkim-signed email elegantly. From my mail logs:


Nov 2 05:49:10 server2 amavis[8746]: (08746-17) dkim: FAILED Author signature by [email protected], From: <[email protected]>, a=rsa-sha1, c=nofws, s=s1024, d=yahoo.es, m.list(ml:marketing-list.gnome.org), fail (message has been altered)

Nov 2 09:21:20 server2 amavis[2853]: (02853-13) dkim: FAILED Author signature by [email protected], From: <[email protected]>, a=rsa-sha256, c=relaxed/relaxed, s=gamma, d=gmail.com, m.list(ml:gthumb-list.gnome.org), fail (message has been altered)

freedesktop has the same problem:

Nov 2 08:40:11 server2 amavis[27309]: (27309-07) dkim: FAILED Author signature by [email protected], From: <[email protected]>, a=rsa-sha256, c=relaxed/relaxed, s=gamma, d=googlemail.com, m.list(ml:xorg.lists.freedesktop.org), fail (body has been altered)


I think current best practice is for mailman to strip the original DKIM-Signature header, using mailman's "REMOVE_DKIM_HEADERS = Yes", and/or have gnome's email servers re-sign the message. Some discussion here: http://www.mail-archive.com/[email protected]/msg59877.html.

- Mike
_______________________________________________
gnome-infrastructure mailing list
[email protected]
http://mail.gnome.org/mailman/listinfo/gnome-infrastructure

Reply via email to