[Bug 3153] RFC 8058 says that we must DKIM sign List-Unsubscribe-Post

https://bugs.exim.org/show_bug.cgi?id=3153

--- Comment #1 from Jeremy Harris <[email protected]> ---
The "requirement" above seems to assume that the ML outbound will be
DKIM-signing, on top of whatever the message originator may have done.
Presumably this is tied into admitting that DKIM really does break
mailing lists - and therefore such signing is required and a verifier
can only look back to the closest ML, not the originator.

Is it appropriate for List-Unsubscribe-Post to be in the default list for
both an ML outbound stream and for other streams (including those that may
end up ML-inbound)?  Should the signing be only-if-present, or "oversign" for
the default case?

The PDKIM_OVERSIGN_HEADERS macro is only provided as a facility; it is not
in any way a default. It is documented as being an oversigning variant
of PDKIM_DEFAULT_SIGN_HEADERS (which is the default), so that should probably
be maintained if a change is made to the default and the corresponding macro.

-- 
You are receiving this mail because:
You are on the CC list for the bug.