On 8 Dec 2020, at 7:13, Tim Bray via mailop wrote:
Because the domain part is checked by SPF and DKIM. The but name (Bob Smith) is not.
You're thinking too much of DMARC, which applies a concept of DKIM signature "alignment" between the From header domain and the d= element in a DKIM signature. Alignment relates to domains only, but the DKIM signature almost always include the full From header, verbatim (with strict canonicalization) or almost verbatim (with relaxed canonicalization.) For some inexplicable reason, the "relaxed" canonicalization was defined without doing the obviously correct thing for resiliency: reduce address list headers to a comma-delimited list of case-squashed email addresses without "display name" or "comment" elements of any sort. As a result, stripping out those elements will break a DKIM signature.
-- Bill Cole [email protected] or [email protected] (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
