Path: csiph.com!eternal-september.org!feeder.eternal-september.org!aioe.org!bofh.it!news.nic.it!robomod
From: Vincent Bernat <bernat@debian.org>
Newsgroups: linux.debian.maint.python
Subject: Re: can we disable the bounce kicker? Re: confirm <string>
Date: Fri, 23 Sep 2016 17:00:02 +0200
Message-ID: <skA7g-5af-29@gated-at.bofh.it>
References: <sfQPo-QB-9@gated-at.bofh.it> <sfRLs-1tp-23@gated-at.bofh.it> <sfSet-1Sd-1@gated-at.bofh.it> <sfSRc-252-17@gated-at.bofh.it> <skzuy-4Kq-23@gated-at.bofh.it>
X-Original-To: debian-python@lists.debian.org
X-Mailbox-Line: From debian-python-request@lists.debian.org  Fri Sep 23 14:51:34 2016
Old-Return-Path: <bernat@debian.org>
X-Amavis-Spam-Status: No, score=-10.88 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DIGITS_LETTERS=1, FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight: using cached result; rate: -5
X-Greylist: delayed 482 seconds by postgrey-1.35 at bendel; Fri, 23 Sep 2016 14:51:21 UTC
Organization: Debian
Mail-Followup-To: debian-python@lists.debian.org
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature"
X-Mailing-List: <debian-python@lists.debian.org> archive/latest/14230
List-ID: <debian-python.lists.debian.org>
List-URL: <https://lists.debian.org/debian-python/>
List-Archive: https://lists.debian.org/msgid-search/87h9968yo7.fsf@zoro.exoscale.ch
Approved: robomod@news.nic.it
Lines: 64
Sender: robomod@news.nic.it
X-Original-Date: Fri, 23 Sep 2016 16:43:04 +0200
X-Original-Message-ID: <87h9968yo7.fsf@zoro.exoscale.ch>
X-Original-References: <CAB4XWXzJumTLOn3cer-s-Czz9nOqxk6PCTaBzFUizO2Bgh4GPQ@mail.gmail.com> <20160910143220.xjrowygwxhbs56jw@nuc> <CAB4XWXwEKTqMc4WwvsL5ZAC=6zz_HC0UK6Xu66dLCY=qwRCS7Q@mail.gmail.com> <20160910153412.efnwyunnwe4vfyqk@nuc> <e01e5248-f42d-31f6-54c3-0fec006fe19f@debian.org>
Xref: csiph.com linux.debian.maint.python:8889

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

 =E2=9D=A6 23 septembre 2016 16:15 CEST, Thomas Goirand <zigo@debian.org>=
=C2=A0:

>> The "[Python-modules-team]" thing in the subject is probably enough to
>> break the DKIM signature.
>
> I don't believe DKIM signature is done on the header+body. If I'm not
> mistaking, it's done only in the body of the mail, because each SMTP
> server on the way to your inbox can add a "Received:" field, so you can
> trace the email.
>
> So yes, footers in emails can break stuff, but not mangling subject,
> which is part of the metadata.

DKIM can also be done on the headers (and usually is). The DKIM
signature contains the list of headers that were used for the
signature. See the headers of the message from Sandro:

#v+
DKIM-Signature: v=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed;
        d=3Dgmail.com; s=3D20120113;
        h=3Dmime-version:sender:in-reply-to:references:from:date:message-id
         :subject:to:cc;
        bh=3DaIVZ7A5RI8js3S6zxiwDgAgKRvn7VlX7UW8naQXAUxk=3D;
        b=3DyWundTut0iTb/fNwkvU0hu4v5+s6vQW/pZN4gGZQpV7exzsUGKHjYs8BTCobNWv=
pEI
         DugPdBz8MszdzoibvUW6vNij26BS+uh6xFmBfUj26xAWJKGpXzYvqGkfQ2FfTkZi6D=
vf
         PlBuHkrzyt8E8FoiD9i+ZIy5VTEV0FeS2KCbVwhU/dflrzxbkwr4eTZLsTU2TTy9Oa=
XL
         Mw44tf8xU4NhlVJGzAsUyX/p+epTHuSMb82l6oyiioTOoJ9Uc2aBWigyv2OTjFas4B=
/G
         EuBKBSwGPQuav9ghqFbaACngF5Mny5dyFEbKI8/oRB/no8IHWVRe+sYti8yL2fuyDG=
6U
         SIag=3D=3D
#v-
=2D-=20
Test input for validity and plausibility.
            - The Elements of Programming Style (Kernighan & Plauger)

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=tJJA
-----END PGP SIGNATURE-----
--=-=-=--