AddAllSignatureResults

From: Andreas Schulze <sca_at_andreasschulze.de>
Date: Thu, 13 Jun 2013 10:45:59 +0000

Hi,

opendkim has the option to add only one ore any validation result in
the Authentication-Results header.
it depends on the value of AddAllSignatureResults on opendkim.conf
What was the reason to implement a "one" or "all" logic with default to "one"?

There is already a function "MaximumSignaturesToVerify" to limit
damage with a default of 3 sigs to check.
That's a good default.

I played with some dkim options today to make my domain pass more
dmarc checks:
  - I do no dkim sign the subject header to allow changes by listservers
  - I set a bodylength limit to allow listservers append a footer

Now I got a dmarc=pass for my message to dmarc-discuss today.
But only because my opendkim add all results to the
Authentication-Results header.

Would it be possible to switch the default for AddAllSignatureResults
to "YES" ?

Andreas
Received on Thu Jun 13 2013 - 10:46:11 PST