https://bz.apache.org/SpamAssassin/show_bug.cgi?id=6918

--- Comment #17 from Alessandro Vesely <[email protected]> ---
(In reply to Henrik Krohns from comment #16)
> (In reply to Giovanni Bechis from comment #15)
> > Created attachment 5880 [details]
> > Parse fix
> > 
> > Authres plugin fails to parse this header:
> > 
> > ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
> >  smtp.mailfrom=domain.com; dmarc=pass action=none header.from=domain.com;
> >  dkim=pass header.d=domain.com; arc=none
> > 
> > This triggers "missing delimiter" because header counter (i=1) is not
> > ignored.
> 
> According to RFC i= can be 1-50 so i=\d is not enough.
> 
> Only ARC has the index, so it's not necessary to be checked for
> Authentication-Results.


There's a whole lot of stuff to check in an ARC chain, beyond out-of-order/
huge chains.  All that is better handled by an ARC module.


> Should parse_authres take argument to indicate it parsing ARC header, and
> should $pms->{authres_parsed} included flag to mark it was ARC?


Agreed.  If the ARC chain is not valid, or if the d= domain in the seal is not
trusted, then the results should not be considered (or worse).

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to