Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.python > #8890

Re: can we disable the bounce kicker? Re: confirm <string>

Show all headers | View raw

On Friday, September 23, 2016 04:15:23 PM Thomas Goirand wrote:
> On 09/10/2016 05:34 PM, Santiago Vila wrote:
> > The "[Python-modules-team]" thing in the subject is probably enough to
> > break the DKIM signature.
> 
> I don't believe DKIM signature is done on the header+body. If I'm not
> mistaking, it's done only in the body of the mail, because each SMTP
> server on the way to your inbox can add a "Received:" field, so you can
> trace the email.
> 
> So yes, footers in emails can break stuff, but not mangling subject,
> which is part of the metadata.

Not correct.  In DKIM there is a header hash and a body hash that are 
calculated separately.  If either changes, then signature verification will 
fail.

You can control which header fields are included, but ~everyone includes 
subject.

Scott K

Back to linux.debian.maint.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-10 15:50 +0200
  Re: can we disable the bounce kicker? Re: confirm <string> Santiago Vila <sanvila@unex.es> - 2016-09-10 16:50 +0200
    Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-10 17:20 +0200
      Re: can we disable the bounce kicker? Re: confirm <string> Santiago Vila <sanvila@unex.es> - 2016-09-10 18:00 +0200
        Re: can we disable the bounce kicker? Re: confirm <string> Mattia Rizzolo <mattia@debian.org> - 2016-09-10 18:30 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-10 18:40 +0200
            Re: can we disable the bounce kicker? Re: confirm <string> "W. Martin Borgert" <debacle@debian.org> - 2016-09-10 20:50 +0200
        Re: can we disable the bounce kicker? Re: confirm <string> Thomas Goirand <zigo@debian.org> - 2016-09-23 16:20 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Santiago Vila <sanvila@unex.es> - 2016-09-23 16:40 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Vincent Bernat <bernat@debian.org> - 2016-09-23 17:00 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Scott Kitterman <debian@kitterman.com> - 2016-09-23 20:10 +0200
    Re: can we disable the bounce kicker? Re: confirm <string> Barry Warsaw <barry@debian.org> - 2016-09-10 20:50 +0200
  Re: can we disable the bounce kicker? Re: confirm <string> Barry Warsaw <barry@debian.org> - 2016-09-10 20:40 +0200
    Re: can we disable the bounce kicker? Re: confirm <string> "Paul R. Tagliamonte" <paultag@gmail.com> - 2016-09-10 21:00 +0200
    Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-10 21:30 +0200
      Re: can we disable the bounce kicker? Re: confirm <string> Paul Wise <pabs@debian.org> - 2016-09-11 05:00 +0200
        Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-11 10:50 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Mattia Rizzolo <mattia@debian.org> - 2016-09-11 11:00 +0200
            Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-11 11:50 +0200
              Re: can we disable the bounce kicker? Re: confirm <string> Jakub Wilk <jwilk@debian.org> - 2016-09-11 21:40 +0200
                Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-15 14:20 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Barry Warsaw <barry@debian.org> - 2016-09-11 20:30 +0200

csiph-web