Groups | Search | Server Info | Login | Register

Groups > comp.mail.sendmail > #8203

Re: autoconvert messes up DKIM signature

Show all headers | View raw

On 2025-11-01 05:39, Marco Moock wrote:
> It is important that the DKIM signing happens after such a conversation.
> IIRC the milter interface is being invoked before the mailers is being
> used.

Yep that was my idea, but this can't work and will never work, when the local 
mailer modifies the email. The local mailer cannot send an email before signing.
So the workflow is actually correct.

> Is there a reason that the local mailer is used in your case when
> sending mail to remote machines?

I sent an email to myself, thus the email never had to leave the server. ;-)
This is why the local mailer was used.

But this whole thing revealed that DKIM and the 9 flag in the local mailer are 
incompatible.
Not only for me signing emails, but for anyone. If your mail server signs an 
email, but my local mailer changes it, then this will screw up your DKIM signature.
My local mailer is always used to deliver any email to my user and thus inbox, 
so allowing my local mailer to modify an email is a no-no.

The question now is, does my disabling of that flag have any drawbacks? Is such 
a conversion really needed in this day and age?

Cheers,
   K. C.

Back to comp.mail.sendmail | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

autoconvert messes up DKIM signature "Helmut K. C. Tessarek" <kct@evermeet.cx> - 2025-10-31 17:21 -0400
  Re: autoconvert messes up DKIM signature "Helmut K. C. Tessarek" <kct@evermeet.cx> - 2025-10-31 19:40 -0400
    Re: autoconvert messes up DKIM signature Marco Moock <mm+solani@dorfdsl.de> - 2025-11-01 10:39 +0100
      Re: autoconvert messes up DKIM signature "Helmut K. C. Tessarek" <kct@evermeet.cx> - 2025-11-01 22:03 -0400
        Re: autoconvert messes up DKIM signature Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> - 2025-11-02 01:38 -0400

csiph-web