On Thu, Jun 06, 2024 at 10:23:28AM +0200, Tobias Fiebig via mailop wrote:
> > To a degree, but not to the point of accepting total garbage
> > (RFC2047-encoded DKIM-Signature headers), or especially, generating
> > total garbage (producing RFC2047-encoded DKIM-Signature headers).
>
> Just to clarify here: rspamd creates correct DKIM signatures when
> working as a signer; The broken DKIM sig was somebody else's
> accomplishment. rspamd ingested it and was ably to verify it.
That level of bending over backwards to tolerate garbage is generally
counterproductive. Instead treat the message as not signed (by any
domains in mangled DKIM-Signature headers).
--
Viktor.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
