[exim-dev] [Bug 1310] Add an option to specify the headers t…

Top Page
Delete this message
Reply to this message
Author: Phil Pennock
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 1310] Add an option to specify the headers that should be used for DKIM signatures
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1310




--- Comment #2 from Phil Pennock <pdp@???> 2012-10-16 15:35:03 ---
I think that we should be careful about adding an option which needs careful
configuration in order to do "the right thing" and where the same data needs to
be set in two options.

My personal inclination is to fix the existing option to sign the
value-or-absence of headers, as the OP expected. If we need a new option, it
should be a bool "dkim_sign_absence_of_headers", which defaults true, so that
folks who want the current behaviour can get it back but everyone gets the
right behaviour by default.

Is there a _use-case_ for being able to specify headers that should be signed,
but only if present? If the value is worth protecting, then it's worth
protecting against a value being added.

The option dkim_sign_headers is expanded, so if someone wants to conditionally
include a header-name, they can already do so.

Am I way off base here?


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email