Re: DKIM & extra headers
"Michael B. Justice via Exim-users" <[email protected]>
| Newsgroups | gmane.mail.exim.user |
|---|---|
| Message-ID | <[email protected]> |
On Mon, 2025-09-22 at 15:01 +0100, graeme vetterlein via Exim-users wrote: > On my *outgoing* email the DKIM is added late on, so ANY > modification I make (headers or body) inside exim will be included in > the DKIM signature? > Can you list which fields you're signing for? If you do not provide a list for dkim_sign_headers, the documentation says that it will provide a list of header names as listed in RFC4871. If you take a look at that list, they're generally things that can't or shouldn't change in transit. Signing for fields that will (or can) change is a bad strategy because they will fail a DKIM check. > On *incoming* email , I use fetchmail and invoke SMTP (exim) to > deliver locally , here any modifications (e.g. in filters) will cause > DKIM to break (..or is it only Body modifications?) > Again, if you're re-writing headers that were already signed in the DKIM, it will cause a failure... as it should. Good luck with your digging! MJ -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## [email protected] ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/