Groups > linux.debian.maint.python > #8890

Re: can we disable the bounce kicker? Re: confirm <string>

Path	csiph.com!news.mixmin.net!newsreader4.netcologne.de!news.netcologne.de!fu-berlin.de!bofh.it!news.nic.it!robomod
From	Scott Kitterman <debian@kitterman.com>
Newsgroups	linux.debian.maint.python
Subject	Re: can we disable the bounce kicker? Re: confirm <string>
Date	Fri, 23 Sep 2016 20:10:02 +0200
Message-ID	<skD58-7dw-29@gated-at.bofh.it> (permalink)
References	<sfQPo-QB-9@gated-at.bofh.it> <sfSRc-252-17@gated-at.bofh.it> <skzuy-4Kq-23@gated-at.bofh.it>
X-Original-To	debian-python@lists.debian.org
X-Mailbox-Line	From debian-python-request@lists.debian.org Fri Sep 23 18:01:41 2016
Old-Return-Path	<debian@kitterman.com>
X-Amavis-Spam-Status	No, score=-7 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FOURLA=0.1, LDO_WHITELIST=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight	NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_BL_NJABL=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .kitterman. - helo: .mailout03.controlledmail. - helo-domain: .controlledmail.) FROM/MX_MATCHES_NOT_HELO(DOMAIN)=0; rate: -5
Dkim-Signature	v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=201409; t=1474653657; bh=SopRLN+XnFTvu9t5+ne1W/ToxuOvaAj5yUUGN0YASBk=; h=From:To:Subject:Date:In-Reply-To:References:From; b=xZWi+BizszpnbNqhAO+HCEW0Icd6tGLTCW3Yq5m+/ZPbLNs6x+NC0z1Syozz3d7NE cO1uQT0J9CZxde5hlb7XvVvc35bt+J4pmlMVy9bd6ARkpE0+5xdElfy6OQHH/feEMG W2s94m+OnxfTkROZ8x4+qUM0fitraWIRav/dAWGQ=
User-Agent	KMail/4.13.3 (Linux/3.13.0-95-generic; KDE/4.13.3; x86_64; ; )
MIME-Version	1.0
Content-Transfer-Encoding	7Bit
Content-Type	text/plain; charset="us-ascii"
X-Mailing-List	<debian-python@lists.debian.org> archive/latest/14232
List-ID	<debian-python.lists.debian.org>
List-URL	<https://lists.debian.org/debian-python/>
List-Archive	https://lists.debian.org/msgid-search/34297086.0VDz77Ami0@kitterma-e6430
Approved	robomod@news.nic.it
Lines	21
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Fri, 23 Sep 2016 14:00:57 -0400
X-Original-Message-ID	<34297086.0VDz77Ami0@kitterma-e6430>
X-Original-References	<CAB4XWXzJumTLOn3cer-s-Czz9nOqxk6PCTaBzFUizO2Bgh4GPQ@mail.gmail.com> <20160910153412.efnwyunnwe4vfyqk@nuc> <e01e5248-f42d-31f6-54c3-0fec006fe19f@debian.org>
Xref	csiph.com linux.debian.maint.python:8890

Show key headers only | View raw

On Friday, September 23, 2016 04:15:23 PM Thomas Goirand wrote:
> On 09/10/2016 05:34 PM, Santiago Vila wrote:
> > The "[Python-modules-team]" thing in the subject is probably enough to
> > break the DKIM signature.
> 
> I don't believe DKIM signature is done on the header+body. If I'm not
> mistaking, it's done only in the body of the mail, because each SMTP
> server on the way to your inbox can add a "Received:" field, so you can
> trace the email.
> 
> So yes, footers in emails can break stuff, but not mangling subject,
> which is part of the metadata.

Not correct.  In DKIM there is a header hash and a body hash that are 
calculated separately.  If either changes, then signature verification will 
fail.

You can control which header fields are included, but ~everyone includes 
subject.

Scott K

Thread

can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-10 15:50 +0200
  Re: can we disable the bounce kicker? Re: confirm <string> Santiago Vila <sanvila@unex.es> - 2016-09-10 16:50 +0200
    Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-10 17:20 +0200
      Re: can we disable the bounce kicker? Re: confirm <string> Santiago Vila <sanvila@unex.es> - 2016-09-10 18:00 +0200
        Re: can we disable the bounce kicker? Re: confirm <string> Mattia Rizzolo <mattia@debian.org> - 2016-09-10 18:30 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-10 18:40 +0200
            Re: can we disable the bounce kicker? Re: confirm <string> "W. Martin Borgert" <debacle@debian.org> - 2016-09-10 20:50 +0200
        Re: can we disable the bounce kicker? Re: confirm <string> Thomas Goirand <zigo@debian.org> - 2016-09-23 16:20 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Santiago Vila <sanvila@unex.es> - 2016-09-23 16:40 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Vincent Bernat <bernat@debian.org> - 2016-09-23 17:00 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Scott Kitterman <debian@kitterman.com> - 2016-09-23 20:10 +0200
    Re: can we disable the bounce kicker? Re: confirm <string> Barry Warsaw <barry@debian.org> - 2016-09-10 20:50 +0200
  Re: can we disable the bounce kicker? Re: confirm <string> Barry Warsaw <barry@debian.org> - 2016-09-10 20:40 +0200
    Re: can we disable the bounce kicker? Re: confirm <string> "Paul R. Tagliamonte" <paultag@gmail.com> - 2016-09-10 21:00 +0200
    Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-10 21:30 +0200
      Re: can we disable the bounce kicker? Re: confirm <string> Paul Wise <pabs@debian.org> - 2016-09-11 05:00 +0200
        Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-11 10:50 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Mattia Rizzolo <mattia@debian.org> - 2016-09-11 11:00 +0200
            Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-11 11:50 +0200
              Re: can we disable the bounce kicker? Re: confirm <string> Jakub Wilk <jwilk@debian.org> - 2016-09-11 21:40 +0200
                Re: can we disable the bounce kicker? Re: confirm <string> Sandro Tosi <morph@debian.org> - 2016-09-15 14:20 +0200
          Re: can we disable the bounce kicker? Re: confirm <string> Barry Warsaw <barry@debian.org> - 2016-09-11 20:30 +0200

csiph-web