Update: GMail's staff resolved this this problem within an hour after I posted this, and they are correctly validating DKIM/ARC signatures again.
> For the past three hours, GMail has been faililng to correctly > validate DKIM/ARC signatures. Nothing changed in our configurations > before this problem started, and remains the same now. > > SMTP headers added by GMail look like this: > > Authentication-Results: mx.google.com; > dkim=neutral (bad version) [email protected] > header.s=mail header.b=aPYfxSQd; > arc=fail (dns record malformed); > spf=pass (google.com: domain of [email protected] > designates 65.110.3.188 as permitted sender) > [email protected]; > dmarc=pass (p=REJECT sp=REJECT dis=NONE) > header.from=inter-corporate.com > > Our DMARC policy is also set to "p=reject" in all-lower-case > letters, and not the way Google is recording it. As long as it > works, I don't really care, but it's not working because it's > accepting or quarantining instead of rejecting. > > Other non-GMail systems validating DKIM/ARC signatures, which > further-confirms that our DNS records are not malformed. Updating > the SOA serial number in the hopes that GMail will ignore any DNS > cache corruption on their end didn't help after TTL ran out. > > If you get such GMail errors today, don't waste any time trying to > troubleshoot problems on your end if other non-GMail systems are > validating DKIM/ARC signatures correctly. > > Hopefully Google will get this problem sorted soon, because > intermittently tossing messages into spam folders that they're > failing to validate DKIM/ARC for is causing problems for end-users. -- Postmaster - [email protected] Randolf Richardson, CNA - [email protected] Inter-Corporate Computer & Network Services, Inc. Vancouver, Beautiful British Columbia, Canada https://www.inter-corporate.com/ _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
