On 29.10.11 09:25, Jason White wrote:
The list server needs to be configured not to modify any headers signed by DKIM. This includes not changing the Subject header.
In my configuration, and this is probably typical, DKIM verification is done during the SMTP transaction, before the message is delivered to Procmail. Messages which fail the check are bounced at that point.
Ah, I have then misunderstood Russell's objection to us cleaning up the clutter munged into the subject line by the list server. It seems to be that: - In itself, the Procmail clean-up does nothing to upset DKIM. (If it's done after DKIM verification, on receipt, it cannot.) - If we're using DKIM, and replying to the list (with a cleaned subject), then the list server's existing DKIM problem would be triggered, just as with an OP. (i.e. just another reason for fixing mailman.) - The concern expressed w.r.t. gmail, yahoo, etc., presumably arises from them also munging subject lines, and therefore creating problems with signed messages, in the same way as luv-main. I'm now wondering why Russell thinks the incompatibility between all problem mailserver configurations and DKIM shouldn't be fixed, instead of shooing away a convenient work-around for the annoying clutter the mailman misconfiguration introduces. Erik -- Don't believe everything you hear, or anything you say.