| |||||||||||||||||||||||||||||||
|
When checking some incoming mail signed with historical DomainKeys signatures without an 'h' tag (no list of signed headers, implying all are signed), I see one source of these messages (bulk, but legitimate commercial junk) which is consistently failing signature validation because the sender did not provide a Message-ID in its posting, and our receiving Postfix appended a Message-ID at the end of the header, this breaking a signature. I can see three possibilities: - change Postfix to prepend a missing Message-ID, instead of appending it; - change Postfix to add a missing Message-ID only for mail matching the local_header_rewrite_clients setting; - not to bother (as DKIM no longer suffers this problem, making an 'h' tag obligatory) Mark
| ||||||||||||||||||||||||||||||
© 2004-2008 readlist.com