Your hypothesis is accurate; speaking from professional experience with
Proofpoint products, there is an option within the Proofpoint PoD DKIM
signing configuration to set the Domain scope to "Any" which will
reproduce this behavior if someone just left the defaults when
generating a key(s).
Apparently this organization generated ALL their domains' keys with the
default Any scope... oof. I'm honestly not even mad, that's impressive.
- Mark Alley
On 11/16/2023 3:48 AM, Gellner, Oliver via mailop wrote:
On 16.11.2023 at 03:05 John Levine via mailop wrote:
I just got a couple of quite remarkable messages from Sabre's Tripcase service,
confirming that they'd received some info I mailed thmm.
Below you can see the Authentication Results header my mail server added.
All 72 valid DKIM signatures really are there, and I am trying to imagine what
kind of screwup at Proofpoint added them. If anyone would like the whole
message, just ask. There's nothing interesting in it other than the signatures.
Probably they don't know how to apply a specific signature based on the From
address. So instead they apply all DKIM signatures they have to all emails.
This reminds of the joke how a computer programmer would hunt a lion in Africa:
1. Go to the northernmost place
2. Traverse the continent alternately east and west working southwards
3. Catch every animal you see
4. Compare the animal to a lion
5. Stop if a match is detected
Unfortunately Sabre didn't implement step 5.
--
BR Oliver
________________________________
dmTECH GmbH
Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232 Karlsruhe
Telefon 0721 5592-2500 Telefax 0721 5592-2777
dmt...@dm.de<mailto:dmt...@dm.de> *www.dmTECH.de<http://www.dmtech.de>
GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
Geschäftsführer: Christoph Werner, Martin Dallmeier, Roman Melcher
________________________________
Datenschutzrechtliche Informationen
Wenn Sie mit uns in Kontakt treten, beispielsweise wenn Sie an unser ServiceCenter
Fragen haben, bei uns einkaufen oder unser dialogicum in Karlsruhe besuchen, mit uns
in einer geschäftlichen Verbindung stehen oder sich bei uns bewerben, verarbeiten wir
personenbezogene Daten. Informationen unter anderem zu den konkreten
Datenverarbeitungen, Löschfristen, Ihren Rechten sowie die Kontaktdaten unserer
Datenschutzbeauftragten finden Sie
hier<https://www.dm.de/datenschutzerklaerung-kommunikation-mit-externen-493832>.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
