On 2022-01-26 at 10:15:44 UTC-0500 (Wed, 26 Jan 2022 16:15:44 +0100)
Renaud Allard via mailop <ren...@allard.it>
is rumored to have said:
On 1/26/22 15:19, Bastian Blank via mailop wrote:
On Wed, Jan 26, 2022 at 12:54:50PM +0100, Renaud Allard via mailop
wrote:
I am getting DMARC rejections at infomaniak.com. There seems to be
an issue
in their DMARC verifications. I tested DMARC sending to gmail which
confirms
me DMARC is OK for that domain.
The email you sent to this list does not contain an alligned DKIM
signature:
| Reply-To: Renaud Allard <ren...@allard.it>
| DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=default;
bh=+XmUCCU2fEMU
| vKLp3lZ2fc0YxNWXp3p9vFNlEBumO6w=; h=subject:from:to:date;
| d=arnor.org;
|
b=gD+aAMh6+qNuDcF47kV1yXRqap+nbpqRy769CSCYOwa2vqThXVawUPJywGeHdTdSzasB
|
SfUBPQFvaj+2pA2Fxvlix0MfUPJc0pdcZyYWrKly3UWUkw4bQeM8p+9DdmBVOckXoafrwr
|
i6DW4c9HbVX6Vp1Q7kAg/PKkihEE+uxKIQdmdvXkrB3LHhxHomykI3b56rN2ShzNOJ2wmG
|
1hECC6Otb3lSJAXei8teW/kj60LKRKdol/4TXJOhLlj1Pmz9uLHbgVlSck2K+Hp1Ok0Ku9
| JC1wFecDjxP5RMM82lEOyXzLmWvrdz7y/utDL2Hdjtp2IW6/igkTtjyx1yrFY3eA==
The address seems to be @allard.it, but it is signed for arnor.org.
You
need to make sure both domains are alligned.
Thank you for the tip. I have now aligned the domains. But it's quite
strange that:
1: it worked for infomaniak.com till today
2: it works for every other provider
One other possible cause of that is a result of using the
'simple/simple' message canonicalizationn for DKIM.
That is VERY fragile, and breaks when a MTA does any sort of trivial
modification (e.g. adding/removing <> around bare addresses in a To/Cc
header.) Even with 'relaxed/relaxed' there are edge cases with some
MTAs (i.e Sendmail) that do "helpful" things in delivery.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
