Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-18 Thread Stephen J. Turnbull
John Levine writes: If you're referring to the ASRG wiki, the person responsible for it is me. I am unaware of any signup problems, and there are multiple people contributing to it. I'm not sure what ASRG refers to, perhaps http://wiki.asrg.sp.am/? I was referring to

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-18 Thread Roland Turner
On 09/18/2014 07:30 PM, Stephen J. Turnbull wrote: I was referring to http://trac.tools.ietf.org/wg/dmarc/trac/wiki/MilestoneOneWiki I had no trouble working through the automated sign-up. What trouble (error message?) are you having with your email address(es)? - Roland

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-17 Thread Rolf E. Sonneveld
All, On 09/15/2014 07:39 PM, Henrik Schack wrote: In Denmark we have a somewhat large (10K+ domains) anti-virus/spam provider breaking DKIM signatures. They break DKIM signatures on incoming email by adding a Virus scanned by line to the body of the email. Not sure how to fix this, but

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-17 Thread Stephen J. Turnbull
Rolf E. Sonneveld writes: started, titled 'Indirect mail flows'. In my view both John and Henrik tried to make (a start of) an inventory of all sorts of real-life situations that potentially can break DKIM signatures or more in general: cause DMARC failures for legitimate mail flows

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-17 Thread Henrik Schack
it's nice to see how many respondents in this thread gave all sorts of advise to Henrik how to deal with a problem, which basically cannot solved by him because it is caused by some 3rd party (modifying the body of a mail for adv. purposes). I interpreted Henrik's mail as a followup to the

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-17 Thread Henrik Schack
IMO, the place to record the inventory is the wiki. Mailing lists are not a good place to keep such records. I would love to add it to the Wiki, unfortunately the Wiki signup features seems to be broken, wont accept any of my email addresses. And the person responsible does not respond

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-17 Thread Kurt Andersen
On Wed, Sep 17, 2014 at 10:33 PM, Henrik Schack henrik.sch...@gmail.com wrote: it's nice to see how many respondents in this thread gave all sorts of advise to Henrik how to deal with a problem, which basically cannot solved by him because it is caused by some 3rd party (modifying the body of

[dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Henrik Schack
In Denmark we have a somewhat large (10K+ domains) anti-virus/spam provider breaking DKIM signatures. They break DKIM signatures on incoming email by adding a Virus scanned by line to the body of the email. Not sure how to fix this, but perhaps some day they'll get tired of my bi-monthly

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Henrik Schack
In this case it's not a header, but a line added to the body of the email Br Henrik Schack On Sep 15, 2014 8:51 PM, Tomki dmarci...@tomki.com wrote: Henrik, I think that the fact of virus scanning is more commonly just another header in the message, which would not break a properly created

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Franck Martin
On Sep 15, 2014, at 7:39 PM, Henrik Schack henrik.sch...@gmail.com wrote: In Denmark we have a somewhat large (10K+ domains) anti-virus/spam provider breaking DKIM signatures. They break DKIM signatures on incoming email by adding a Virus scanned by line to the body of the email.

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Henrik Schack
No it's not at all a free service. But they advertise anyway :-( Br Henrik On Mon, Sep 15, 2014 at 9:28 PM, Franck Martin fmar...@linkedin.com wrote: On Sep 15, 2014, at 7:39 PM, Henrik Schack henrik.sch...@gmail.com wrote: In Denmark we have a somewhat large (10K+ domains) anti-virus/spam

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Murray S. Kucherawy
Though I would never put such a thing in a standards document, OpenDKIM does have the capability to rewrite arriving header fields prior to signing/verifying to overcome things like this. Your ESP's verifier could be trained to ignore the added line prior to verifying, or better yet, do DKIM

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Murray S. Kucherawy
, 2014 2:16 PM To: dmarc@ietf.org Cc: hen...@schack.dk Subject: Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider In article CAGfQzLTvB9C97s=cGZ-k17ynv0=JUr6pygEbVnohhA= t00p...@mail.gmail.com you write: -=-=-=-=-=- -=-=-=-=-=- In Denmark we

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Terry Zink
S. Kucherawy [mailto:superu...@gmail.com] Sent: Monday, September 15, 2014 5:21 PM To: Terry Zink Cc: John Levine; dmarc@ietf.org; hen...@schack.dk Subject: Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider How will most mail clients know

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Dave Crocker
On 9/15/2014 5:26 PM, Terry Zink wrote: Having the Virus scanned by xxx ***in a header*** defeats the purpose of advertising since most clients won’t display it. A/V filters put those taglines in there to advertise, not just to tell the mail client that their mail has been scanned. And

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Dave Crocker
On 9/15/2014 7:00 PM, Roland Turner wrote: As I understand it, most advertisers maintain a nuclear ambiguity about the effectiveness of their activities, making measurements rather difficult to obtain. Every presentation I've seen from usability (human factors, UX, ...) specialist has said

Re: [dmarc-ietf] Indirect mail flows: DKIM signature breakage by cloud anti-virus/spam provider

2014-09-15 Thread Roland Turner
On 09/16/2014 11:42 AM, Dave Crocker wrote: On 9/15/2014 7:00 PM, Roland Turner wrote: As I understand it, most advertisers maintain a nuclear ambiguity about the effectiveness of their activities, making measurements rather difficult to obtain. Every presentation I've seen from usability