Author: Jeremy Harris Date: To: exim-dev Subject: Re: [exim-dev] [Bug 1309] Headers included in dkim_sign_headers are
not in the signature when not in the message
On 23/09/16 16:35, Robert Blayzor wrote: > Most importantly " if they are present in the message being signed”… but now it adds them to signing regardless? That certainly breaks some things (quite a bit), most notably when you post a message into a mailing list and “List-Id” is added. That completely invalidates the original DKIM signature.
... and doesn't say you can't add other things as well, including
headers not present.
Yes, DKIM breaks mailinglists...
> Is there a knob to turn this back to the original functionality and “not oversign” ?
Not a simple knob, no.
You could construct a non-oversigning list for dkim_sign_headers by
using a suitably complex expansion. Probably involving ${filter...}.
--
Cheers,
Jeremy
