home | list info | list archive | date index | thread index

Re: Next up: DKIM (was Re: Is the mailing list SPF setup fixed?)



On Tue, 15 Nov, 2022 at 8:36 AM, Dianne Skoll <dianne [ at ] skoll [ dot ] ca> wrote:
On Tue, 15 Nov 2022 03:04:42 -0500
Dmitriy Korovkin <dnkorovkin [ at ] gmail [ dot ] com> wrote:

 If you wish some additional statistics, Gmail tests pass just fine.

That's good!  Thanks for letting me know.

 I am afraid if we remove "DKIM-Signature:" headers, the spam filters
 might not like it

Unlikely. I don't DKIM-sign messages to the list (but I do normally DKIM-sign
all my outbound mail) and there have been no problems so far.

The correct way a mailing list should work is as follows: Suppose the
envelope sender and header From: addresses are both "someone [ at ] example [ dot ] org"

Then the addresses should be changed as follows:

Envelope sender: <linux+bounces-whatever-someone=example [ dot ] org [ at ] linux-ottawa [ dot ] org>
From: <linux [ at ] linux-ottawa [ dot ] org>
Sender: <someone [ at ] example [ dot ] org>

and then any existing DKIM-Signature header should be stripped and ideally
a new one added that signes for linux-ottawa.org

 You receive a sort of "DKIM signature invalid" error by the spam
 filter, right?

Yep.  Adding the list footer alters the message body, which breaks the
signature.
Indeed, the mailing list alternates the mail body and that is what breaks DKIM. Well, in this I agree with you: mailing list should update both SPF and DKIM records or remove DKIM record from the header if it does not do DKIM signing.
Regards,

Dianne.

To unsubscribe send a blank message to linux+unsubscribe [ at ] linux-ottawa [ dot ] org
To get help send a blank message to linux+help [ at ] linux-ottawa [ dot ] org
To visit the archives: https://lists.linux-ottawa.org