OpenDKIM 2.10.0 status

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Fri, 8 Aug 2014 15:49:48 -0700 (PDT)

Hi all,

The release of 2.10.0 is currently in limbo. I had planned to release a
version that has some major changes in keeping up with industry
developments, but most of the interesting ones (largely having to do with
DMARC) have stalled. As a result, 2.10.0 is stalled.

The current RELEASE_NOTES entry for it is below. The question I have for
the dev community is: Should we go into beta as-is, or wait a while longer
for the standards stuff to start moving again and then release based on
those developments?

Specifically, the IETF is about to spin up a DMARC working group. One of
the possible outputs of that effort is a set of one or more extensions to
DKIM that would try to solve the mailing list problem. The DKIM-Delegate
proposal is one of several that were discussed. Those discussions are
paused while the IETF goes through the motions of forming a working group.
They will un-pause soon as the working group forms and gets organized; its
creation was approved yesterday. So OpenDKIM can either continue holding
until there's something relevant to code up and experiment with, or we can
ship 2.10.0 soon and then spin up 2.11.0 or 3.0.0 (or something) when
there's new work to do.

The current RELEASE_NOTES for 2.10.0:

2.10.0 2014/??/??
         Feature request #182: Remove "AddAllSignatureResults". All signature
                 results will now be added via Authentication-Results header
                 fields. Requested by Tomki Camp.
         Feature request #180: Rename "LDAPSoftStart" to "SoftStart" and apply
                 it to SQL connections as well. Requested by Daniel Kauffman.
         Feature request #179: Add "IgnoreMalformedMail" option.
         Fix bug #177: Plug leaking "result" structures when OpenLDAP is in
                 use. Problem reported by Quanah Gibson-Mount.
         Fix bug #183: Discontinue support for ADSP.
         Make "rrvs" and "smime" recognized Authentication-Results methods.
         Truncate configuration file lines at carriage return.
         Replace overlapping strlcpy() with memmove() in dkim_get_key_file().
                 Reported by Daniel J. Luke.
         LIBOPENDKIM: Feature request #157: Add dkim_mail_parse_multi().
                 Suggested by Alessandro Vesely.
         LIBOPENDKIM: Fix bug #208: If a signature fails to verify for either
                 reason (header hash mismatched or body hash mismatched), set
                 DKIM_SIGERROR_BADSIG so that Authentication-Results doesn't
                 report a failure with "no signature error".
         LIBOPENDKIM: dkim_header() is now a lot more strict about the input
                 it will accept (see RFC5322 Section 2.2).
         LIBOPENDKIM: Tighten relaxed modes to break on only DKIM-defined
                 whitespace characters. Problem noted by Elizabeth Zwicky.
         CONTRIB: Fix bug #207: Clean up the "stats" directory.
         TOOLS: Feature request #178: Add "-F" flag to opendkim-genzone so
                 records are created with the FQDN. Patch from Andreas Schulze.
         REPUTATION: Handle parameters safely in repute.php. Reported by
                 Daniel Black.

-MSK
Received on Fri Aug 08 2014 - 22:50:09 PST