--On 14 June 2010 11:59:30 -0700 Phil Pennock <exim-users@???>
wrote:
>
> I think that if you run a mailing-list manager which modifies content at
> all, whether it's a message footer or Subject: manipulation, then you
> should be looking to strip DKIM-Signature: from mails as part of
> processing the mails. There's no need to embed any replacement
> signatures or know anything more than "this is a checksum header, we're
> breaking the checksum, strip the header out". It would probably be more
> polite to rename it to Old-DKIM-Signature: rather than remove it. And
> processing DomainKey-Signature: in the same way would be good.
I think the recommended behaviour is to leave alone the original signature,
and add your own. Given that mailing lists can break signatures, it's
unwise to reject an email on the basis that it carries a broken signature.
--
Ian Eiloart
IT Services, University of Sussex
01273-873148 x3148
For new support requests, see
http://www.sussex.ac.uk/its/help/
