On 07/03/2024 21:04, Andy Smith wrote:
Hi, On Thu, Mar 07, 2024 at 09:44:51AM +0100, Hans wrote:--- sninp --- Authentication-Results: mail35c50.megamailservers.eu; spf=none smtp.mailfrom=lists.debian.org Authentication-Results: mail35c50.megamailservers.eu; dkim=fail reason="signature verification failed" (2048-bit key) header.d=debian.org header.i=@debian.org header.b="pDp/TPD5" Return-Path: <bounce-debian-devel=hans.ullrich=loop.de@lists.debian.org> Received: from bendel.debian.org (bendel.debian.org [82.195.75.100]) by mail35c50.megamailservers.eu (8.14.9/8.13.1) with ESMTP id 425I9ZEK112497 for <hans.ullrich@loop.de>; Tue, 5 Mar 2024 18:09:37 +0000 --- snap --- White mails get the dkim=pass and spam mails got dkim=fail (as you see above).A great many legitimate emails will fail DKIM so it is not a great idea to reject every email that does so. I don't think that you are going to have a good time using Internet mailing lists while your mail provider rejects mails with invalid DKIM, so if I were you I'd work on fixing that rather than trying to get everyone involved to correctly use DKIM. In this specific example your problem is that a mail came through the Debian bug tracking system (which pretends to be the original sender) and on the way out was DKIm signed by debian.org and then went through Debian's list servers. Somewhere in there the DKIM signature was broken. I don't rate your chances of getting the operators of bugs.debian.org and lists.debian.org to agree to preserve DKIM since I know at least some of them are severely opposed to DKIM. Your mailbox provider really should not be rejecting everything that has a broken DKIm signature. This email from me will probably have a broken DKIM signature. Thanks, Andy
Andy's mail's DKIM looks OK here: Authentication-Results: mx.zohomail.com; dkim=pass; spf=none (zohomail.com: 82.195.75.100 is neither permitted nor denied by domain of lists.debian.org) smtp.mailfrom=bounce-debian-user=john=bunsenlabs.org@lists.debian.org; dmarc=pass(p=none dis=none) header.from=strugglers.net ARC-Seal: i=1; a=rsa-sha256; t=1709813111; cv=none; d=zohomail.com; s=zohoarc; b=E/0YtYVq6D01XC5ug3vazK169M6jDxoXOO6K7rs6qdKhNHP1XDV7QSLAvwJetsjzooDe39MNSl/160MWgl3URqQ1YhPYZ9aBFQ3DsmN74mTKPiQYOxqx0XzNy1Nemo4oRetVQDrwEGeegQWUBbrxtbD18x8R7Dd9Ps19NxKRMP8= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1709813111; h=Content-Type:Date:Date:From:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:Resent-Sender:Resent-Date:References:Resent-Message-ID:Resent-From:Subject:Subject:To:To:Message-Id:Reply-To:Cc; bh=ohelUf+wTnNtAeaNpYE6UONuc2euPhvqBvxLaU7Fz7c=; b=MUW94hTSknXpUch7F94usVvulKMrwldlWtoyP582oO6+EMhKaeisaBraF7KE46pdbHyE+AAzf/dn0xPDxNnN+M+RXSbXsQvu7qEIe/+q6fCdppDhql+IMx+U9H+Q61olqpD+JMh9IxFgAUSKme0bLD8NhFKOskvLdtzqq3XeIpg= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=none (zohomail.com: 82.195.75.100 is neither permitted nor denied by domain of lists.debian.org) smtp.mailfrom=bounce-debian-user=john=bunsenlabs.org@lists.debian.org; dmarc=pass header.from=<andy@strugglers.net> (p=none dis=none) --snip-- DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=strugglers.net; s=alpha; h=In-Reply-To:Content-Type:MIME-Version:References :Message-ID:Subject:To:From:Date:Content-Transfer-Encoding:Sender:Reply-To:Cc :Content-ID:Content-Description:Resent-To; bh=ohelUf+wTnNtAeaNpYE6UONuc2euPhvqBvxLaU7Fz7c=; b=c5YTQp9JWbbPNuLxDYO19XXqgy KmEiV4tSD2LlNXy4C9/5PPfZ5JGT6U70UQpwIXgC1alHcUyD+LY6JDPEbO33KuWsWr4gvrJCwrq0u HMUc+sKwQgknFeLxa5Jk3a3VFLURsYYec+6Lc9C4WsQB9I+xuv8CmO22xpRRNqB3SWdR7gtHy+Ab8 1UGvqoeEsCAtc5y2dt3uiX6Uy5qYDRbgbSVBhfq4TwjxmyTqmnkT1oG62tW2LavipJDvfR/40weCR B/S7To5h6Lgc/1oLArFNtrtPlfyyRg38maGSj5Jgt9X5Vwdfg187lIla/I4OBjib2pDV5d38QzL7v 4Vz0PYFg==; -- John