On 26/03/23 18:37, Benny Pedersen via Postfix-users wrote:
Peter via Postfix-users skrev den 2023-03-26 06:15:

DKIM and ARC signatures need to be checked right after the message is
received,

not really, all that is needed is to frezze stata of dkim, arc, dmarc at recieve state,

which involves ... checking the validity at that stage. It's rather obvious taht if you change the message it can break DKIM and ARC, so if you are going to check the signatures they have to be checked before you make those changes. Call it what you want it's still checking it.

new signatures need to be generated right before the message
is sent,

not really, this stage would be waste of resources

If you're going to generate new signatures then it does no good to generate them and *then* make changes which could potentially break the signature. That said I was not intending to make a statement about whether or not it's worthwhile to re-sign the message or not.

majordomo did not break dkim, dovecot maillist still dont, and are still using mailman, thumps up, it works

I'm well aware of how majordomo worked. We've moved on from majordomo and now the mailing list works differently. It's pointless arguing about the way things used to be, that system is not likely going to return.


Peter
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to