Re: dkim on openbsd mailing lists.

2019-08-18 Thread Paco Esteban
On Sun, 18 Aug 2019, Todd C. Miller wrote:

> The mailing list server may modify the subject and from headers
> (depending on user configuration) and often does modify the message
> body.
> 
> That is why DKIM headers are removed.

I did not know that the list may modify those headers.  In fact never
noticed it ...  I guess some reading majordomo's help won't hurt.

Thanks for your answer Todd.

-- 
Paco Esteban.
https://onna.be/gpgkey.asc
9A6B 6083 AD9E FDC2 0EAF  5CB3 5818 130B 8A6D BC03



Re: dkim on openbsd mailing lists.

2019-08-18 Thread Todd C . Miller
The mailing list server may modify the subject and from headers
(depending on user configuration) and often does modify the message
body.

That is why DKIM headers are removed.

 - todd



dkim on openbsd mailing lists.

2019-08-17 Thread Paco Esteban
Hi misc@,

First, I do not consider myself an expert on this, by any means.  It's
just genuine curiosity.

I noticed that the project mailing lists I'm subscribed to (ports and
misc at this time) remove the dkim signature of the emails I sent to
them (luckily I did not activate the dmarc detailed failure reports).

It seems weird to me to do so, as those lists do not modify the headers
signed by dkim (well, at least not the usually signed), so dkim should
be still valid even when the list re-sends the email to all subscribers.

Other mailing lists I'm subscribed to of course fail spf, but not dkim
if they do not touch body or subject (as many do ...).

If there's a list admin listening that could explain that to me, I would
really appreciate it.

Cheers,
Paco.

p.s: I'm pretty sure somebody else asked for this, but I could not find
anything on the archives.

-- 
Paco Esteban.
https://onna.be/gpgkey.asc
9A6B 6083 AD9E FDC2 0EAF  5CB3 5818 130B 8A6D BC03