On Wed, Dec 2, 2015 at 10:06 PM, Ben Cooksley <bcooks...@kde.org> wrote: > Hi all, > > Just a quick announcement to inform everyone that I have now adjusted > the KDE.org mail filter configuration to: > > a) Enforce SPF rules as specified by the domain > b) Temporarily reject any mail which does not successfully pass DKIM > validation where the domain specifies it is DKIM enabled.
I've had to disable DKIM validation, as Debian's infrastructure does not oversign any email which transits through their mailing lists (they don't appear to have enabled DKIM at all, which is disappointing). This means all mails to Debian mailing lists which get modified (changes to body and subject at the very least, as well as any other header specified by the DKIM signer) aren't accepted by any system performing DKIM enforcement. Email which transits through KDE.org mailing lists is always oversigned to avoid this issue. People who subscribe to Debian mailing lists using kdemail.net or kde.org addresses are advised to file tickets with Debian's Infrastructure team requesting they correct this omission. I will be re-enabling DKIM validation in one week's time - which will then break subscriptions to Debian mailing lists (as any email from anyone who has enabled DKIM which hits their lists will not be accepted by KDE email infrastructure) > > Please let sysadmin know of any issues. > > Regards, > Ben Regards, Ben
