From owner-freebsd-questions@freebsd.org Mon Nov 26 17:21:36 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CD57F113D82A for ; Mon, 26 Nov 2018 17:21:36 +0000 (UTC) (envelope-from johnl@iecc.com) Received: from gal.iecc.com (gal.iecc.com [IPv6:2001:470:1f07:1126:0:43:6f73:7461]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "gal.iecc.com", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5C6F97E163 for ; Mon, 26 Nov 2018 17:21:35 +0000 (UTC) (envelope-from johnl@iecc.com) Received: (qmail 85870 invoked from network); 26 Nov 2018 17:21:34 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=iecc.com; h=date:message-id:from:to:cc:subject:in-reply-to:mime-version:content-type:content-transfer-encoding; s=14f6c.5bfc2b9e.k1811; bh=CMJ+PIwH29B/UkuHhx2GyO3/gxvlS95MSOj0aV+f+Zc=; b=WokN+SQTwxFbX5/KA+JJ/4QuoVkZaFA9EMLCijg9DaTJ+pWIZVtAYf1iznab9WjniJzOJTpWSwCMJDNYGet6+5/Uv68Ippb/lqXpoyjQwqw7FAeRZxqXZpAtX/Ff06PWn8Z4AdnPCicx8mLSze8iT+wDn9/eUqKaUxzXOzZeAYf0L//J91xfHJ6u+14uhOjmcHCKfPg/8LT72hARYihrg9mAHh2iVoMKpu4fo2kg1Sa3bH2Ox2DF3mMGVc/0lzpA Received: from ary.qy ([IPv6:2001:470:1f07:1126::78:696d:6170]) by imap.iecc.com ([IPv6:2001:470:1f07:1126::78:696d:6170]) with ESMTP via TCP6; 26 Nov 2018 17:21:34 -0000 Received: by ary.qy (Postfix, from userid 501) id CDCDB2008E6098; Mon, 26 Nov 2018 12:21:33 -0500 (EST) Date: 26 Nov 2018 12:21:33 -0500 Message-Id: <20181126172133.CDCDB2008E6098@ary.qy> From: "John Levine" To: freebsd-questions@freebsd.org Cc: vas@mpeks.tomsk.su Subject: Re: Invalid DKIM signatures in this list In-Reply-To: <20181126125259.GB86999@admin.sibptus.ru> Organization: Taughannock Networks X-Headerized: yes Mime-Version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 8bit X-Rspamd-Queue-Id: 5C6F97E163 X-Spamd-Result: default: False [-5.12 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[iecc.com]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2001:470:1f07:1126::/64]; MV_CASE(0.50)[]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; HAS_ORG_HEADER(0.00)[]; RCVD_COUNT_THREE(0.00)[4]; TO_MATCH_ENVRCPT_SOME(0.00)[]; DKIM_TRACE(0.00)[iecc.com:+]; RCPT_COUNT_TWO(0.00)[2]; DMARC_POLICY_ALLOW(-0.50)[iecc.com,none]; MX_GOOD(-0.01)[mx.iecc.com]; NEURAL_HAM_SHORT(-1.00)[-0.997,0]; FROM_EQ_ENVFROM(0.00)[]; RCVD_TLS_LAST(0.00)[]; IP_SCORE(-1.61)[ipnet: 2001:470::/32(-4.49), asn: 6939(-3.48), country: US(-0.09)]; ASN(0.00)[asn:6939, ipnet:2001:470::/32, country:US] X-Rspamd-Server: mx1.freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 17:21:37 -0000 In article <20181126125259.GB86999@admin.sibptus.ru> you write: >Dear Colleagues, > >I have noticed that the Mailman which manages this list keeps the >sender's "DKIM-Signature:" header intact but modifies the body of the >message by adding a footer. > >This behavior invalidates the sender's digital signature with >"dkim=fail (body hash mismatch; body probably modified in transit)". Quite right. That's how DKIM works. >Whom do I contact about it? Nobody. See RFC 6376, section 6.3. R's, John