Re: [dmarc-discuss] dmarc.org breaks dkim & dmarc

2016-10-04 Thread Juri Haberland via dmarc-discuss
On 04.10.2016 20:27, Benny Pedersen via dmarc-discuss wrote: > what will happend if opendmarc skips last signer if multiple signed ?, > imho opendmarc should really be more dnssec strict, and make all dkim > keys pass before it does dmarc pass, my msgs do pass on dmarc.org > mailserveres, but

Re: [dmarc-discuss] dmarc.org breaks dkim & dmarc

2016-10-04 Thread Benny Pedersen via dmarc-discuss
On 2016-10-04 19:41, Elizabeth Zwicky wrote: The DMARC on the mailing list passes when it reaches me -- it appears that something in the path between you and dmarc.org is the problem with breaking the DKIM signature. correct, did i get a problem on postfix maillist ? Since it's dmarc.org's

Re: [dmarc-discuss] dmarc.org breaks dkim & dmarc

2016-10-04 Thread Elizabeth Zwicky via dmarc-discuss
The DMARC on the mailing list passes when it reaches me -- it appears that something in the path between you and dmarc.org is the problem with breaking the DKIM signature. Since it's dmarc.org's DKIM signature, it's put on after all the mailing list handling, so I'm not sure why anybody thinks

Re: [dmarc-discuss] dmarc fail for linkedin

2016-10-04 Thread Juri Haberland via dmarc-discuss
On 04.10.2016 17:35, DurgaPrasad - DatasoftComnet via dmarc-discuss wrote: > I have done a stock dmarc implementation on centos 7. > > We use MailScanner and spamassassin with decent success since many years. I > would prefer a milter anyday so that I can influence my scores. > > My concerns

Re: [dmarc-discuss] dmarc-discuss Digest, Vol 56, Issue 5

2016-10-04 Thread Benny Pedersen via dmarc-discuss
On 2016-10-04 16:06, Lynne Mack via dmarc-discuss wrote: HOW I DO GET OFF THIS LIST how to read the list ? http://lists.dmarc.org/mailman/listinfo/dmarc-discuss, helpfull in the box unsubscribe or edit options i just wonder how you subscribed

Re: [dmarc-discuss] dmarc-discuss Digest, Vol 56, Issue 5

2016-10-04 Thread Lynne Mack via dmarc-discuss
HOW I DO GET OFF THIS LIST On 16-10-03 20:10, dmarc-discuss-requ...@dmarc.org wrote: Send dmarc-discuss mailing list submissions to dmarc-discuss@dmarc.org To subscribe or unsubscribe via the World Wide Web, visit http://dmarc.org/mailman/listinfo/dmarc-discuss or, via

[dmarc-discuss] dmarc.org breaks dkim & dmarc

2016-10-04 Thread Benny Pedersen via dmarc-discuss
Authentication-Results: linode.junc.eu; dmarc=pass header.from=dmarc.org Authentication-Results: linode.junc.eu; dkim=pass (1024-bit key; unprotected) header.d=dmarc.org header.i=@dmarc.org header.b=g7uNA2zS; dkim=fail reason="signature verification failed" (1024-bit key; secure)

Re: [dmarc-discuss] dmarc.org breaks dkim & dmarc

2016-10-04 Thread Franck Martin via dmarc-discuss
I'm not sure what is the issue here? Mailing lists break DKIM by design. We could go to the old style of mailing lists, which did not break DKIM, but did not have, for instance, these nice footers to tell people how to unsubscribe... For the deployment of DNSSEC this is the wrong list, and let's

Re: [dmarc-discuss] dmarc fail for linkedin

2016-10-04 Thread DurgaPrasad - DatasoftComnet via dmarc-discuss
I have done a stock dmarc implementation on centos 7. We use MailScanner and spamassassin with decent success since many years. I would prefer a milter anyday so that I can influence my scores. My concerns is that if dmarc=fail is the result of the check - why do I need to look at the spf

Re: [dmarc-discuss] dmarc.org breaks dkim & dmarc

2016-10-04 Thread Benny Pedersen via dmarc-discuss
On 2016-10-04 17:20, Franck Martin wrote: I'm not sure what is the issue here? Mailing lists break DKIM by design. bad designed on thiese maillist then its not dkim/dmarc fails post on postfix maillist have never breaked dkim for me We could go to the old style of mailing lists, which did

Re: [dmarc-discuss] dmarc.org breaks dkim & dmarc

2016-10-04 Thread John Levine via dmarc-discuss
In article <10d366e813d75805a35b93d9c9b7f...@junc.eu>, Benny Pedersen via dmarc-discuss wrote: >On 2016-10-04 17:20, Franck Martin wrote: >> I'm not sure what is the issue here? Mailing lists break DKIM by >> design. > >bad designed on thiese maillist then its not dkim/dmarc fails