Re: [exim] dkim=fail (body hash mismatch; body probably mod…

Top Page
Delete this message
Reply to this message
Author: Victor Sudakov
Date:  
To: exim-users
Subject: Re: [exim] dkim=fail (body hash mismatch; body probably modified in transit)
Bill Cole via Exim-users wrote:
> On 2022-12-05 at 11:00:21 UTC-0500 (Mon, 5 Dec 2022 16:00:21 +0000)
> Jeremy Harris via Exim-users <jgh@???>
> is rumored to have said:
>
> > On 05/12/2022 15:38, Bill Cole via Exim-users wrote:
> >> If you use relaxed instead of relaxed/relaxed, the unspecified body
> >> canonicalization is "simple" which is never what anyone should use.
> >
> > It shouldn't be. The docs say:
> >
> > "the current implementation only supports signing with
> > the same canonicalization method for both headers and body".
>
> Does the code itself concur? I'm not conversant with the Exim code so
> I'm a bit at a handicap in checking.
>
> If a message arrives with "c=relaxed;" in the DKIM-Signature header, a


No, it arrives with "c=relaxed/relaxed;" no matter if dkim_canon is
set to "relaxed" or "relaxed/relaxed" on the sender.


--
Victor Sudakov VAS4-RIPE
http://vas.tomsk.ru/
2:5005/49@fidonet