Re: Signature broken for replies

From: John Massai <massaijohn_at_gmail.com>
Date: Mon, 5 Oct 2015 22:59:44 -0700

On 10/4/15, Murray S. Kucherawy <msk_at_blackops.org> wrote:
> On Fri, 18 Sep 2015, John Massai wrote:
>> Is it best to remove In-Reply-To from consideration by opendkim or is
>> there something else that needs to be fixed?
>
> Are you oversigning that header field? If so, I wouldn't because you're
> restricting your signature such that its addition later breaks the
> signature.

No, only From is being oversigned

> If you just have it in SignHeaders, then this shouldn't be a problem
> because opendkim shouldn't include it in "h=" if you don't have it in the
> original signed message.

No I do not (except by default, apparently). It seemed to be signing
it by default and causing this problem unless I add it to OmitHeaders.
Received on Tue Oct 06 2015 - 05:59:57 PST