Hi all,

The gnome mailman server doesn't seem to handle dkim-signed email elegantly. From my mail logs:


Nov 2 05:49:10 server2 amavis[8746]: (08746-17) dkim: FAILED Author signature by i=juanjomari...@yahoo.es, From: <juanjomari...@yahoo.es>, a=rsa-sha1, c=nofws, s=s1024, d=yahoo.es, m.list(ml:marketing-list.gnome.org), fail (message has been altered)

Nov 2 09:21:20 server2 amavis[2853]: (02853-13) dkim: FAILED Author signature by i=@gmail.com, From: <paolobe...@gmail.com>, a=rsa-sha256, c=relaxed/relaxed, s=gamma, d=gmail.com, m.list(ml:gthumb-list.gnome.org), fail (message has been altered)

freedesktop has the same problem:

Nov 2 08:40:11 server2 amavis[27309]: (27309-07) dkim: FAILED Author signature by i=@googlemail.com, From: <leoc....@googlemail.com>, a=rsa-sha256, c=relaxed/relaxed, s=gamma, d=googlemail.com, m.list(ml:xorg.lists.freedesktop.org), fail (body has been altered)


I think current best practice is for mailman to strip the original DKIM-Signature header, using mailman's "REMOVE_DKIM_HEADERS = Yes", and/or have gnome's email servers re-sign the message. Some discussion here: http://www.mail-archive.com/mailman-users@python.org/msg59877.html.

- Mike
_______________________________________________
gnome-infrastructure mailing list
gnome-infrastructure@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-infrastructure

Reply via email to