| |||||||||||||||||||||||||||||||
|
> Here is one not-too-important issue. > > When checking some incoming mail signed with historical DomainKeys signatures > without an 'h' tag (no list of signed headers, implying all are signed), > I see one source of these messages (bulk, but legitimate commercial junk) > which is consistently failing signature validation because the sender did not > provide a Message-ID in its posting, and our receiving Postfix appended a > Message-ID at the end of the header, this breaking a signature. By the time any Postfix change reaches significant deployment, the DomainKeys usage would hopefully be insignificant. Wietse > I can see three possibilities: > - change Postfix to prepend a missing Message-ID, instead of appending it; > - change Postfix to add a missing Message-ID only for mail matching > the local_header_rewrite_clients setting; > - not to bother (as DKIM no longer suffers this problem, making an 'h' > tag obligatory) > > Mark > >
| ||||||||||||||||||||||||||||||
© 2004-2008 readlist.com