Re: ezmlm-idx and DomainKeys

Hi Bruce,

Can we get an update on your progress with DomainKeys, and any benefits you've 
measured so far?  

Thanks!

On Thursday, February 01, 2007 5:04:47 pm Bruce Guenter wrote:
> I'm looking into what the most appropriate method of adding support to
> ezmlm-idx for signing outgoing messages.  Most likely I will rely on an
> external qmail-queue wrapper like Russell Nelson's qmail-queue-dk, but
> even so there needs to be at least one change to ezmlm-send.
>
> Since DomainKeys signs messages based on their *header* sender address,
> there needs to be some indication in outgoing messages that the sender
> is the mailing list.  This already happens for all automated messages
> (ie subscription replies, etc), but for actual posts the original sender
> is left in the headers.  As far as I can tell, this can be accomplished
> by stripping any incoming Sender: header and adding a new one pointing
> to the list address.
>
> Also, since ezmlm-idx will optionally remove headers (headerremove) and
> modify the content (text/trailer) within the signed message, the
> existing DomainKey-Signature: header will be invalidated.  As such,
> ezmlm-idx should strip the DomainKey-Signature: header.
>
> If this makes sense, I will be adding both modifications to the standard
> ezmlmrc files.  If not, please help me figure out how to make this work.



-- 
Associate.com - THE Place to Associate!                  http://freegroups.net
Is Your E-mail Group Here?  See http://freegroups.net/faq/your-group-here.html