Am 12.10.2014 um 15:12 schrieb Robert Schetterer:
the operator of had-pilot believes and is is confident their dkim sigs
are correct
double check your dmarc milter setup, it s very tricky with postfix,
make sure mail is not altered on its way (which might brake dkim)
DKIM seems to have a problem on many sites currently
Spamassassin even degraded the rule to "testing"
looks like this time you can say "give some positive
score if it is valid, but don't trust a invaid result"
what is exactly SA does
cat maillog | grep T_DKIM_INVALID | wc -l
1162
my guess is that people signing messages using way
too much fragile parts of messages for it