DKIM only checks signature integrity, it does not check who signs the message. Any valid DKIM signature with any correctly published DKIM selector/key passes DKIM validation if signed content is not altered.
You can also consider signing message with both senderdomain.aaa and fromdomain.bbb. It's OK to have multiple DKIM signatures from different domains. 07.07.2019 16:20, Jay 1985 пишет: > thanks for the response. if I use fromdomain.bbb domain for DKIM > signature, will it pass the DKIM authentication also? > > On Sun, Jul 7, 2019 at 3:13 PM Vladimir Dubrovin > <dubro...@corp.mail.ru <mailto:dubro...@corp.mail.ru>> wrote: > > > DMARC checks SPF and DKIM alignmen with From address. That is, in > order DKIM to be accepted for DMARC, DKIM domain must align with > From domain. In your case, fromdomain.bbb domain should be used > for DKIM signature. Currently, SPF and DKIM pass, but SPF and DKIM > alignment with From address fail. > > 07.07.2019 13:44, Jay 1985 via dmarc-discuss пишет: >> we have a scenario where some users send emails "on behalf of" >> other email address. Headers appear like... >> Sender: us...@senderdomain.aaa <mailto:us...@senderdomain.aaa> >> From: us...@fromdomain.bbb <mailto:us...@fromdomain.bbb> >> Return-Path: <prvs=12345abcd=us...@senderdomain.aaa> >> <mailto:prvs=12345abcd=us...@senderdomain.aaa> >> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; >> d=senderdomain.aaa; >> >> In gmail both SPF and DKIM authentication passed but this doesn't >> align with the from domain DMARC fails. How to tackle this >> situation. is there any way forward? this is the only issue >> pending to move forward in reject mode. >> >> >> _______________________________________________ >> dmarc-discuss mailing list >> dmarc-discuss@dmarc.org <mailto:dmarc-discuss@dmarc.org> >> http://www.dmarc.org/mailman/listinfo/dmarc-discuss >> >> NOTE: Participating in this list means you agree to the DMARC Note Well >> terms (http://www.dmarc.org/note_well.html) > > > -- > Vladimir Dubrovin > @ mail.ru <http://mail.ru> > -- Vladimir Dubrovin @ mail.ru
_______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
