Re: Postfix and (Open)DKIM: Received Email?

[Jim Seymour]

On Thu, 24 Sep 2015 08:48:24 -0400 (EDT)
wie...@porcupine.org (Wietse Venema) wrote:

> Jim Seymour:
> > Hi All,
> > 
> > I just installed, configured and have working OpenDKIM.  I can see
> > outgoing email is being properly signed, but not certain what it's
> > doing for me on the receiving side of things?
> > 
> > All the searching and reading I've done talks all about how to get
> > it going, and how to test your outgoing email, but not a word on
> > what it does for you on received email--e.g.: validating the
> > signatures on same, alerting you to mis-matches, or whatever?
> > 
> > Can somebody either enlighten me or point me in a direction in
> > which I might find enlightenment?
> 
> The verifier can add a header to the message. However, DKIM does
> not specify a policy for how to handle failure.  You may want to
> look into DMARC for that.

Very well.  Thanks, Wietse.

Regards,
Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at .

Re: Postfix and (Open)DKIM: Received Email?

[Wietse Venema]

Jim Seymour:
> Hi All,
> 
> I just installed, configured and have working OpenDKIM.  I can see
> outgoing email is being properly signed, but not certain what it's doing
> for me on the receiving side of things?
> 
> All the searching and reading I've done talks all about how to get it
> going, and how to test your outgoing email, but not a word on what it
> does for you on received email--e.g.: validating the signatures on same,
> alerting you to mis-matches, or whatever?
> 
> Can somebody either enlighten me or point me in a direction in which I
> might find enlightenment?

The verifier can add a header to the message. However, DKIM does
not specify a policy for how to handle failure.  You may want to
look into DMARC for that.

Wietse

Postfix and (Open)DKIM: Received Email?

[Jim Seymour]

Hi All,

I just installed, configured and have working OpenDKIM.  I can see
outgoing email is being properly signed, but not certain what it's doing
for me on the receiving side of things?

All the searching and reading I've done talks all about how to get it
going, and how to test your outgoing email, but not a word on what it
does for you on received email--e.g.: validating the signatures on same,
alerting you to mis-matches, or whatever?

Can somebody either enlighten me or point me in a direction in which I
might find enlightenment?

Thanks,
Jim
-- 
Note: My mail server employs *very* aggressive anti-spam
filtering.  If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at .