Re: dkim simple canonicalization

2016-06-07 Thread Jason A. Donenfeld
On Tue, Jun 7, 2016 at 1:48 PM, Gilles Chehade wrote: > The RFC advice is the way to go. > > IIRC with dkimproxy you get to decide the canonicalization strategy and > this is where the filter should be going. Okay, thanks for the advice. I'll stick with dkimproxy until the

Re: dkim simple canonicalization

2016-06-07 Thread Gilles Chehade
On Tue, Jun 07, 2016 at 09:43:49AM +0200, Jason A. Donenfeld wrote: > Hi Joerg, > > Reading from the RFC http://dkim.org/specs/rfc4871-dkimbase.html I saw this: > > > "Signers SHOULD choose canonicalization algorithms based on the types > of messages they process and their aversion to risk. For

Re: dkim simple canonicalization

2016-06-07 Thread Bruno Pagani
; Jason Definitively an issue if you send mail to any ML, because those will add headers to your mail (like all the Lists ones), including their own DKIM signature (just take a look at your own mail headers). Also, most list even change the title (to add list tag before it, like “[misc] dki

Re: dkim simple canonicalization

2016-06-07 Thread Joerg Jung
> On 07 Jun 2016, at 09:43, Jason A. Donenfeld wrote: > > Hi Joerg, > > Reading from the RFC http://dkim.org/specs/rfc4871-dkimbase.html I saw this: > > > "Signers SHOULD choose canonicalization algorithms based on the types > of messages they process and their aversion to