Re: DKIM hardfail (with eg. google or test sites)

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Fri, 15 Mar 2013 08:39:05 -0700 (PDT)

On Fri, 15 Mar 2013, Matthias Weiss wrote:
> AlwaysSignHeaders To,Subject,MIME-Version,Content-
> Type,Sender,From,Message-Id,Date,Reply-To,List-Unsubscribe
>
> In the z= header the "Message-Id" and "Sender" fields are missing. Could that
> be a reason?

That likely means those two fields weren't there when the filter saw the
message (i.e., they got added by the MTA after the filter handling phase),
so they didn't get signed. It shouldn't be a problem unless the receiving
site insists they be included in what's covered by the signature, but I
think that would be unusual.

-MSK
Received on Fri Mar 15 2013 - 15:39:24 PST