Re: Listing the "testing" flag in Authentication-Results?

From: SM <sm_at_resistor.net>
Date: Sun, 16 Dec 2012 11:21:56 -0800

At 22:45 12-12-2012, Dan Mahoney, System Admin wrote:
>1) I'm running opendkim-milter under FreeBSD, and I could have sworn
>that if you had t=y set on your flag during verification, that you'd
>get something like "result=pass (testing)" in the
>Authentication-Results header. Am I just misremembering, or does
>the (testing) only show up in failure situations, or ADSP testing?

There will be a "testing" in the Authentication-Results header. BTW,
the verification for this message was "verification error: signing
key too small; secure key".

>2) I've had a few experiences where I've had a key retrieval failure
>(DNS issues), and I found that while OpenDKIM adds the X-DKIM
>header, and logged the error to syslog, there's not a corresponding
>authentication-results header that would be shown to the user that
>indicates this was tried and failed Is it possible to "log" this to
>the mail message?

In such cases you should see:

  Authentication-Results: mail.example.com; dkim=permerror
      reason="key not found"

See the "On-DNSError" setting for setting the milter behavior on such failures.

Regards,
-sm
Received on Sun Dec 16 2012 - 19:22:12 PST