RE: Strange error messages

From: Murray S. Kucherawy <msk_at_cloudmark.com>
Date: Mon, 20 Dec 2010 09:32:49 -0800

> -----Original Message-----
> From: opendkim-users-bounce_at_lists.opendkim.org [mailto:opendkim-users-bounce_at_lists.opendkim.org] On Behalf Of John Coppens
> Sent: Monday, December 20, 2010 8:22 AM
> To: opendkim-users_at_lists.opendkim.org
> Subject: Re: Strange error messages
>
> > However, It's not a configuration error on anybody's part, it's just a
> > notice (likely) that the verification of your signature isn't matching
> > what's in the email headers. This almost certainly because the
> > mailing list software that MIT uses changes one of the signed headers,
> > likely the Subject field.
>
> Well, if incorrect or unnecessary messages (or signatures) are
> generated, that is, at least, ecologically unjustified ;-)

They're neither; they're correct because the DK signature was invalidated (probably by the relaying MLM), and they're necessary because the signing domain explicitly requested them (via the "r=" tag as Todd mentioned).

As for your question about using DK vs. DKIM, it appears most or all of the verifiers are now treating DK and DKIM equally, and since the latter is the standard that's got the momentum now, I would stick with it.

-MSK
Received on Mon Dec 20 2010 - 17:32:59 PST