On Thu, Nov 13, 2025 at 10:29:05AM +0100, Thomas Barth via users wrote: > dkim valid > https://paste.debian.net/plainh/d2da8c37
Interestingly, it also fails as DKIM_INVALID on my SA 3.4.6 installation: $ curl -sL https://paste.debian.net/plainh/d2da8c37 | spamassassin -D dkim -t 2>&1 | grep -i dkim Nov 14 01:07:48.957 [15412] dbg: dkim: using Mail::DKIM version 1.20200907 Nov 14 01:07:48.957 [15412] dbg: dkim: providing our own resolver: Mail::SpamAssassin::DnsResolver Nov 14 01:07:48.958 [15412] dbg: dkim: performing public key lookup and signature verification Nov 14 01:07:48.960 [15412] dbg: dkim: FAILED DKIM, [email protected], d=stcecyten.org, s=root, a=rsa-sha256, c=relaxed/relaxed, unknown key size, fail, does not match author domain Nov 14 01:07:48.960 [15412] dbg: dkim: signature verification result: FAIL (MESSAGE HAS BEEN ALTERED) Nov 14 01:07:48.960 [15412] dbg: dkim: adsp: performing lookup on _adsp._domainkey.photo.stcecyten.org Nov 14 01:07:48.961 [15412] dbg: dkim: adsp result: U/unknown (dns: unknown), author domain 'photo.stcecyten.org' Nov 14 01:07:48.972 [15412] dbg: dkim: no wl entries match author [email protected], no need to verify sigs BAYES_999=3.2,DCC_CHECK=1.8,DKIM_INVALID=1.3,DKIM_INVALID_NOT_ML=2.5, DKIM_SIGNED=0.15,DMARC_FAIL_REJECT=1.5,FSL_BULK_SIG=0.701, 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the 1.3 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict 2.5 DKIM_INVALID_NOT_ML DKIM is invalid, and it's not an mailing dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=stcecyten.org [email protected] header.a=rsa-sha256 header.s=root header.b=CTskxNE+; dkim-atps=neutral BAYES_999=0.1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, DMARC_PASS=-0.001, EVL_NTS=1.5, HTML_MESSAGE=0.001, DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=root; d=stcecyten.org; 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily 3.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the 1.3 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict 2.5 DKIM_INVALID_NOT_ML DKIM is invalid, and it's not an mailing $ spamassassin --version SpamAssassin version 3.4.6 running on Perl version 5.32.1 > Links expire in 24 h Timeout is a bit on the short side, but hopefully someone with SA4 will be able to try on their system before it expires. -- Opinions above are GNU-copylefted.
