Mark Sapiro writes: > Also, forwarded mail if DKIM signed may pass DKIM if the forwarding > server makes no modification to the mail, but if the forwarding > server DKIM signs its outgoing mail, the signing domain won't be > aligned with the From: domain so the mail will fail DMARC.
Either said forwarder is stripping a valid DKIM signature, or the recipient is not conforming to RFC 7489: Note that a single email can contain multiple DKIM signatures, and it is considered to be a DMARC "pass" if any DKIM signature is aligned and verifies. -- GNU Mailman consultant (installation, migration, customization) Sirius Open Source https://www.siriusopensource.com/ Software systems consulting in Europe, North America, and Japan ------------------------------------------------------ Mailman-Users mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/[email protected]/ https://mail.python.org/archives/list/[email protected]/ Member address: [email protected]
