RE: Yahoo Received header modification invalidating DKIM signature

From: SM <sm_at_resistor.net>
Date: Tue, 29 Jun 2010 15:13:26 -0700

Hi Murray,
At 15:05 29-06-10, Murray S. Kucherawy wrote:
>Interesting. This means some Yahoo! MTA is adding the timezone
>comment after signing but before it leaves the ADMD?

No. The receiver is running Sun Java System Messaging Server and the
change is made at that end during the delivery. The implementation
seems different from opendkim in that the DKIM verification is being
done once the message is queued.

Yahoo! MTA could have added the timezone to prevent such rewrites at
the receiver's end.

Regards,
-sm
Received on Tue Jun 29 2010 - 22:13:48 PST