Re: [PHP-DEV] DKIM on messages

2019-07-10 Thread Scott Dutton

On 2019-07-08 15:57, Tim Düsterhus wrote:


This will *still* break anything using DMARC, because neither DKIM nor
SPF is valid. Anything *not* using DMARC is better off, though.

Ideally the email modifications are disabled entirely. The emails can 
be

reliably detected using the List-Id header and filtered based on it.

Best regards
Tim Düsterhus


Hi Tim

The suggested method is not modifying the emails as you suggested, 
unsubscribe links should be handled by adding a List-Unsubscribe header 
(which almost all major providers use to show inline unsubscribe links) 
though that needs a one click link which the current link is not (so 
again a little more work)


Im not sure how big of a change that will be (as it will be many people 
updating filters I assume) but yeah that's a much better way. I assume 
people must get dmarc reports now as the SPF and DKIM checks will both 
fail currently ?



Thanks

Scott


--
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP-DEV] DKIM on messages

2019-07-08 Thread Tim Düsterhus
Scott,

[using DKIM and (lax) DMARC myself, usually just lurking]

Am 08.07.19 um 21:29 schrieb sc...@exussum.co.uk:
> It looks like ezmlm is used, there is an option for headerremove which
> DKIM-Signature could be added to
> (https://manpages.debian.org/experimental/ezmlm-idx/ezmlm-send.1.en.html)  
> this
> would prevent the signature being attached and therefore pass.

This will *still* break anything using DMARC, because neither DKIM nor
SPF is valid. Anything *not* using DMARC is better off, though.

Ideally the email modifications are disabled entirely. The emails can be
reliably detected using the List-Id header and filtered based on it.

Best regards
Tim Düsterhus

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php