What glue are you using for SA? DKIM is pretty fragile depending on the signature and implementation. One \n\r changed to \n for example which some SMTP transports will do can cause a failure.
I pretty much consider DKIM a 100% if it works and generally worthless if it fails technology right now BUT should get better as people realize they can't muck with things mid transport. Regards, KAM -- Kevin A. McGrail Asst. Treasurer & VP Fundraising, Apache Software Foundation Chair Emeritus Apache SpamAssassin Project https://www.linkedin.com/in/kmcgrail - 703.798.0171 On Mon, Mar 19, 2018 at 11:29 AM, Sebastian Arcus <s.ar...@open-t.co.uk> wrote: > I've been seeing a number of false positives recently from T_DKIM_INVALID > with Gmail emails. Are some Gmail servers misconfigured, or could something > be going on at my end? The DKIM record which is flagged as invalid is below: > > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; > s=20161025; h=mime-version:from:date:message-id:subject:to;bh=8wlgvdpEOm > UO2ugslPxRkFYA/ZThwu2bWy5VmlR76ug=; > b=gRcnOIzmENqS8a91mSdETdXvyH6df7u0tSwsadk6CMD0KtAbzuM3ojHW+kPEo7AB1i > vnbCDc/vsR6H7pP0k3hZmF7z/dAaeZWD4RVzqM+Fv70oHy4af64j+fGSekOCM9o4ShRQ > Vk3KyF+69sKTK3rRWEnfrcgi/pN2DJWDvrIBRjmFOZYKNVN+8elaVM9DOO7tEMLYuw7T > +sVaUMNt8MuPxRhrskJYOIxK8zzkcJHYV+1TuWJuqZAHRVwgnDWX7q3Wx0GwrX+3lKpm > 3A1+F5dBVjH4dXvdfIESm5XpV8b9uBn9daGWrUgkR+PB23XsL9QkxEqCRXdgII3FRxtQ > Ps6A== >
