Path: csiph.com!news.mixmin.net!newsreader4.netcologne.de!news.netcologne.de!fu-berlin.de!bofh.it!news.nic.it!robomod
From: Scott Kitterman <debian@kitterman.com>
Newsgroups: linux.debian.maint.python
Subject: Re: can we disable the bounce kicker? Re: confirm <string>
Date: Fri, 23 Sep 2016 20:10:02 +0200
Message-ID: <skD58-7dw-29@gated-at.bofh.it>
References: <sfQPo-QB-9@gated-at.bofh.it> <sfSRc-252-17@gated-at.bofh.it> <skzuy-4Kq-23@gated-at.bofh.it>
X-Original-To: debian-python@lists.debian.org
X-Mailbox-Line: From debian-python-request@lists.debian.org  Fri Sep 23 18:01:41 2016
Old-Return-Path: <debian@kitterman.com>
X-Amavis-Spam-Status: No, score=-7 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FOURLA=0.1, LDO_WHITELIST=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_BL_NJABL=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .kitterman. - helo: .mailout03.controlledmail. - helo-domain: .controlledmail.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=0; rate: -5
Dkim-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kitterman.com; s=201409; t=1474653657; bh=SopRLN+XnFTvu9t5+ne1W/ToxuOvaAj5yUUGN0YASBk=; h=From:To:Subject:Date:In-Reply-To:References:From; b=xZWi+BizszpnbNqhAO+HCEW0Icd6tGLTCW3Yq5m+/ZPbLNs6x+NC0z1Syozz3d7NE cO1uQT0J9CZxde5hlb7XvVvc35bt+J4pmlMVy9bd6ARkpE0+5xdElfy6OQHH/feEMG W2s94m+OnxfTkROZ8x4+qUM0fitraWIRav/dAWGQ=
User-Agent: KMail/4.13.3 (Linux/3.13.0-95-generic; KDE/4.13.3; x86_64; ; )
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
X-Mailing-List: <debian-python@lists.debian.org> archive/latest/14232
List-ID: <debian-python.lists.debian.org>
List-URL: <https://lists.debian.org/debian-python/>
List-Archive: https://lists.debian.org/msgid-search/34297086.0VDz77Ami0@kitterma-e6430
Approved: robomod@news.nic.it
Lines: 21
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
X-Original-Date: Fri, 23 Sep 2016 14:00:57 -0400
X-Original-Message-ID: <34297086.0VDz77Ami0@kitterma-e6430>
X-Original-References: <CAB4XWXzJumTLOn3cer-s-Czz9nOqxk6PCTaBzFUizO2Bgh4GPQ@mail.gmail.com> <20160910153412.efnwyunnwe4vfyqk@nuc> <e01e5248-f42d-31f6-54c3-0fec006fe19f@debian.org>
Xref: csiph.com linux.debian.maint.python:8890

On Friday, September 23, 2016 04:15:23 PM Thomas Goirand wrote:
> On 09/10/2016 05:34 PM, Santiago Vila wrote:
> > The "[Python-modules-team]" thing in the subject is probably enough to
> > break the DKIM signature.
> 
> I don't believe DKIM signature is done on the header+body. If I'm not
> mistaking, it's done only in the body of the mail, because each SMTP
> server on the way to your inbox can add a "Received:" field, so you can
> trace the email.
> 
> So yes, footers in emails can break stuff, but not mangling subject,
> which is part of the metadata.

Not correct.  In DKIM there is a header hash and a body hash that are 
calculated separately.  If either changes, then signature verification will 
fail.

You can control which header fields are included, but ~everyone includes 
subject.

Scott K