Re: [Bitcoin-development] Mailman incompatibility with DKIM ...

2015-06-20 Thread Adam Weiss
It changes the mechanics at least. A quick glance at RFC(2)822 makes it clear that this is a pretty weakly specified behavior and is somewhat of an edge case. However, rewriting the envelopes has become somewhat prevalent since strict DMARC has been adopted and I suspect that most recent MUAs wil

Re: [Bitcoin-development] Mailman incompatibility with DKIM ...

2015-06-19 Thread Jeff Garzik
On Fri, Jun 19, 2015 at 12:47 PM, Adam Weiss wrote: > Hi Warren, > > If you set dmarc_moderation_action to "Munge from", the list will detect > when someone posts from a domain that publishes a request for strict > signature checking for all mails originating from it (in DNS) and rewrite > the en

Re: [Bitcoin-development] Mailman incompatibility with DKIM ...

2015-06-19 Thread Adam Weiss
Hi Warren, If you set dmarc_moderation_action to "Munge from", the list will detect when someone posts from a domain that publishes a request for strict signature checking for all mails originating from it (in DNS) and rewrite the envelope-from to the list's address. Reply-to will be added and se

Re: [Bitcoin-development] Mailman incompatibility with DKIM ...

2015-06-19 Thread Mike Hearn
> > Mailman isn't resigning it. Should it be? Does other mailing list > software? > Mailman must take responsibility for the mail itself. It doesn't have to actually sign with DKIM to do so: for backwards compatibility, spam filters fall back to other heuristics to try and figure out the 'owner'

Re: [Bitcoin-development] Mailman incompatibility with DKIM ...

2015-06-19 Thread Warren Togami Jr.
On Fri, Jun 19, 2015 at 12:24 AM, Mike Hearn wrote: > The new list currently has footers removed during testing. I am not >> pleased with the need to remove the subject tag and footer to be more >> compatible with DKIM users. >> > > Lists can do what are effectively MITM attacks on people's mess

Re: [Bitcoin-development] Mailman incompatibility with DKIM ...

2015-06-19 Thread Mike Hearn
> > The new list currently has footers removed during testing. I am not > pleased with the need to remove the subject tag and footer to be more > compatible with DKIM users. > Lists can do what are effectively MITM attacks on people's messages in any way they like, if they resign for the messages

Re: [Bitcoin-development] Mailman incompatibility with DKIM ...

2015-06-19 Thread Warren Togami Jr.
On Thu, Jun 18, 2015 at 11:56 PM, Mike Hearn wrote: > We already removed the footer because it was incompatible with DKIM >> signing. Keeping the "[Bitcoin-dev] " prepend tag in subject is compatible >> with DKIM header signing only if the poster manually prepends it in their >> subject header.

Re: [Bitcoin-development] Mailman incompatibility with DKIM ...

2015-06-19 Thread Mike Hearn
> > We already removed the footer because it was incompatible with DKIM > signing. Keeping the "[Bitcoin-dev] " prepend tag in subject is compatible > with DKIM header signing only if the poster manually prepends it in their > subject header. > I still see footers being added to this list by Sour