On 2024-08-14 Chris Siebenmann via Exim-users <exim-users@lists.exim.org> wrote: > > On 14/08/2024 15:27, Kurt Jaeger via Exim-users wrote: > > > So: user1@domain1 has an autoreply, and the autoreply > > > should be signed with dkim for domain1.
> > I do not agree. > > The DKIM RFC says that anyone can sign a message. > As a practical matter, we[*] have observed GMail rejecting email > messages with claims that they are doing so because the DKIM signature > domain didn't match the From: domain. After observing this, we switched > to signing messages with a domain that matched the From: (and generally > not signing them if we had no such match, even though we could have > signed them as our main domain name). [...] Hello, Are you confident your observation is relevant here, in context with messages with empty envelope from? This sounds like gmail is doing the standard DMARC alignment-check requiring *either* envelope-from aligning with header-from together with SPF-success *or* a DKIM signature whose d= tag matches header-from. cu Andreas -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/