On Tue, Jan 16, 2024 at 10:24 AM Murray S. Kucherawy <superu...@gmail.com> wrote:
> As I recall, with milter in particular, the MTA will add a missing Date > field, which the filter never actually sees and thus cannot sign. The > filter only sees the message exactly as it was presented to the MTA. As a > result, if the message is signed, Date is not, and any verifier that thinks > it ought to be will consider the signature invalid. > In fact, if you configure your filter to oversign Date but don't actually give it a Date field, and then the MSA adds one, then the signature attached to the message is dead before it hits the first hop. -MSK
_______________________________________________ dmarc mailing list dmarc@ietf.org https://www.ietf.org/mailman/listinfo/dmarc
