John,

* John Levine <jo...@taugh.com>:
> The Authentication-Results: header defined in RFC 5451 can describe
> the SPF and DKIM status of a message.  It's typically added by the
> SMTP daemon as the message is received.  
> 
> Is there any way to tell spamassassin to look at the A-R header rather
> than trying to rerun the SPF and DKIM checks itself?

IIRC there isn't at the moment. One thought that comes to mind immediately:

If there were it should not be enabled by default or others will try to forge
the results. It should only be enabled if a "trust boundary"
<http://tools.ietf.org/html/rfc5451#section-1.2> has been established. The
documentation should mention that.

p@rick

-- 
[*] sys4 AG
 
http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer
Aufsichtsratsvorsitzender: Joerg Heidrich
 

Reply via email to