-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On Fri, 2017-05-26 at 18:38 +0300, Vladimir Dubrovin via mailop wrote: > - Lines longer than 998 octets (unicode character takes few octets) > - Missed Date:, Message-ID: or another required header > - Unencoded 8-bit character in the header > - Malformed From: header (with missed domain e.g. From: mailer-daemon > or with unescaped special characters) > - Invalid line termination (e.g. LF instead of CRLF) > - Missed CRLF at the end of the message > Last 2 are important if you have "simple" canonization for message > body (use relaxed).
> DKIM can also fail due to clock skew, if you have t= in DKIM- > Signature. Yes, we have t= in the signature, but all the servers have clocks corrected by NTP. We are using relaxed/relaxed canonization. I should have mentioned that all this mail is generated by a wide variety of user agents (Outlook, Thunderbird, various iThings, etc). It is all normal corporate 1-1 individual mail - not transactional stuff generated by some web form. I doubt anyone but me is using Evolution, but I have not been able to reproduce any of the dkim failures using that. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) iEYEAREKAAYFAlkolRsACgkQL6j7milTFsEeLgCfRPA7v9DNcN40NO9zuwzTKL3+ waQAn1zY/wDeydOb68KuU6wHBvT4BeNc =TBxE -----END PGP SIGNATURE----- _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
