If you're running a mailing list that retains the original DKIM
signatures [that will fail because the message subject and body have
been modified] you might want to strip/hide them because it can cause
Apple iCloud Mail to increment the spam score by 1 which can cause it to
be delivered to Junk (despite "I've pretty religiously been marking each
email as not spam but it's not keen at all").

For an email originating from gmail.com retaining the original From:,
it doesn't appear to care about the DMARC failure (p=none) but it
doesn't like the failed DKIM signature.

There was also a signed ARC result (from before the email reaches
Mailman) that would be invalid but hiding that didn't have any visible
effect on the score. There's no forwarding involved, the user is
subscribed directly with an address hosted by iCloud.

X-ICL-SCORE: 4.332033240044
X-Apple-MoveToFolder: Junk
x-spam-flag: yes
x-suspected-spam: true
...
Authentication-Results: bimi.icloud.com; bimi=skipped reason="insufficient 
dmarc"
X-ARC-Info: policy=fail; arc=fail; id=mx5.messagingengine.com
Authentication-Results: arc.icloud.com; arc=fail
Authentication-Results: dmarc.icloud.com; dmarc=fail header.from=gmail.com
X-DMARC-Info: pass=fail; dmarc-policy=none; s=r0; d=r0; pdomain=gmail.com
X-DMARC-Policy: v=DMARC1; p=none; sp=quarantine; 
rua=mailto:[email protected]
Authentication-Results: dkim-verifier.icloud.com; dkim=pass (1024-bit key) 
header.d=lists.example.com [email protected] header.b=soRHKGr8
Authentication-Results: dkim-verifier.icloud.com; dkim=fail reason="signature 
verification failed" (2048-bit key) header.d=gmail.com [email protected] 
header.b=rcro5QTc
Authentication-Results: spf.icloud.com; spf=pass ...
...
From: Example <[email protected]>

X-ICL-SCORE: 3.333033230041
X-Apple-MoveToFolder: INBOX
...
Authentication-Results: bimi.icloud.com; bimi=skipped reason="insufficient 
dmarc"
X-ARC-Info: policy=fail; arc=none
Authentication-Results: arc.icloud.com; arc=none
Authentication-Results: dmarc.icloud.com; dmarc=fail header.from=gmail.com
X-DMARC-Info: pass=fail; dmarc-policy=none; s=r0; d=r0; pdomain=gmail.com
X-DMARC-Policy: v=DMARC1; p=none; sp=quarantine; 
rua=mailto:[email protected]
Authentication-Results: dkim-verifier.icloud.com; dkim=pass (1024-bit key) 
header.d=lists.example.com [email protected] header.b=iMjTZqEm
Authentication-Results: spf.icloud.com; spf=pass ...
...
From: Example <[email protected]>

-- 
Simon Arlott
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to