aah, sigh.. surely you see it then.. you *always* have to mitigate to DKIX-Signature, right away! This is also not pointed out enough in the draft, me thinks.
Steffen Nurpmeso wrote in <20250708005227.u1nbMnlT@steffen%sdaoden.eu>: ... |Originator (message forged for recipient domain f.g): | | MAIL FROM: <[email protected]> | RCPT TO: <[email protected]> | RCPT TO: <[email protected]> | ... | DKIM-AC: sn=1; s=K1; [email protected]; dr=f.g; rt=d; rt=e; b=... | DKIM-Signature: acdc=1:O; s=K1; ... | DKIX-Signature: acdc=1:O; s=K1; ... | From: [email protected] | To: [email protected], [email protected], [email protected], [email protected] | | bla | |f.g, local delivery: | | ... | DKIM-Signature: acdc=2:IV; ... | DKIX-Signature: acdc=1:O; s=K1; ... | ... | |[email protected] -- a mailing-list! It sends further along, and From: |mitigated: | | MAIL FROM: <[email protected]> | RCPT TO: <[email protected]> | ... | DKIM-AC: sn=2; s=K2; [email protected]; dr=X.X; rt=X; b=... | DKIM-Diff: sn=2; c=xz; hd=BASE64; bd=BASE64 | DKIM-Signature: acdc=2:DEOV; s=K2 ... | DKIX-Signature: acdc=2:DEOV; s=K2 ... | DKIX-Signature: acdc=1:O; s=K1; ... | From: a(AT)b(DOT)c via [email protected] <[email protected]> | ... | List-Unsubscribe: bla | |[email protected] -- an expanded alias! The host honours RFC 3461: | | MAIL FROM: <[email protected]> | RCPT TO: <[email protected]> | ... | DKIM-AC: sn=2; s=K2; [email protected]; dr=realv.realx; rt=qreal; b=... | DKIM-Signature: acdc=2:EOV; s=K2 ... | DKIX-Signature: acdc=2:EOV; s=K2 ... | DKIX-Signature: acdc=1:O; s=K1; ... | From: [email protected] | ... But that should be right i hope. Good night from Germany, --steffen | |Der Kragenbaer, The moon bear, |der holt sich munter he cheerfully and one by one |einen nach dem anderen runter wa.ks himself off |(By Robert Gernhardt) | |During summer's humble, here's David Leonard's grumble | |The black bear, The black bear, |blithely holds his own holds himself at leisure |beating it, up and down tossing over his ups and downs with pleasure | |Farewell, dear collar bear _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
