[savannah-help-public] [sr #109593] nongnu.org mailing list is modifying BODY rendering DKIM (and S/MIME) signature invalid

[Ivan Warren]

URL:
  <https://savannah.gnu.org/support/?109593>

                 Summary: nongnu.org mailing list is modifying BODY rendering
DKIM (and S/MIME) signature invalid
                 Project: Savannah Administration
            Submitted by: ivanw
            Submitted on: Thu 29 Nov 2018 10:14:50 AM UTC
                Category: Project mailing lists
                Priority: 5 - Normal
                Severity: 3 - Normal
                  Status: None
             Assigned to: None
        Originator Email: address@hidden
        Operating System: Microsoft Windows
             Open/Closed: Open
         Discussion Lock: Any

    _______________________________________________________

Details:

The mailmain software running on nongnu.org is altering the contents of the
body while yet indicating the from: field is the sender.
Because of this, any DKIM check makes the message invalid.
If the sending domain uses DMARC, the mail may get rejected because of that.
This means that since my domain is DMARC protected (and all my messages DKIM
signed) - they will be rejected (and not received) by a receiving MTA that
checks my domain's DMARC status (and makes a DKIM verification).

Furthermore, any S/MIME signature gets invalidated. (PGP/GPG won't be affected
because the modifications occur outside the signed message block)

SMTP has provision for headers specific to mailing lists and should be used
instead of altering the message body.






    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/support/?109593>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/