Re: SA DKIM related bug 6462 - Possibly Gmail, Sendmail and/or Thunderbird related?

From: Kevin A. McGrail <>
Date: Thu, 15 Dec 2011 19:34:55 -0500

> Looks like sendmail's the culprit. -MSK

My manual injection test concurs with your very clever mail queue check
though your check more definitively rules out procmail as well.

This is a big issue and major barrier to DKIM validation because if the
rcpt to: data is in a different case than the To: Header than I believe
DKIM is going to fail when sendmail uses to rcpt to: data to rewrite the
To: header.

Any ideas of who is it fault to work on fixing this very large issue?

Is DKIM supposed to be using case sensitive information from the To: Header?

Is Sendmail allowed to rewrite the To header?

Are mail clients supposed to use a different case for To: headers than
for rcpt to: data?

If you are using SA 3.3.2, the T_DKIM_INVALID test will flag DKIM_SIGNED
emails that don't have DKIM_VALID hits. From spot-checking my tiny
server, I've got at least 200 candidates in 12 hours that look to show
this is a broad, real-world issue.

Received on Fri Dec 16 2011 - 00:35:06 PST

This archive was generated by hypermail 2.3.0 : Mon Oct 29 2012 - 23:20:22 PST