Re: [postmaster_at_ivenue.com: DKIM failure report for p2OKvsn2005015]

From: SM <sm_at_resistor.net>
Date: Fri, 25 Mar 2011 14:21:43 -0700

Hi Murray,
At 22:37 24-03-2011, Murray S. Kucherawy wrote:
>Is there a longer-term fix we should be considering?

If we want to deal with multiple DKIM signatures, it may be
worthwhile considering a long-term fix. When we first talked about
multiple DKIM signatures, it was about whether to take the top-most
signature or the start from the bottom. Usually, the bottom DKIM
signature is the first signature affixed to the message. It faces a
greater probability of being invalidated as it goes through other relays.

When we are doing ADSP, it is the bottom signature that matters as we
are correlating the DKIM signing domain with the Author domain. It's
not a straight-forward issue to address (re: your comment about the
processing overhead).

Regards,
-sm
Received on Fri Mar 25 2011 - 21:54:17 PST