message headers say dkim = fail, stats say = PASSED. why the conflict, and how to fix?

From: <>
Date: Wed, 29 Jun 2016 09:04:59 -0700


I can't see to figure out what the problem here is :-/ I'd appreciate any help getting this figured out and solved once an for all!

In some-not-all received emails -- notably ONLY those sent via 'bulk' services -- I get a DKIM fail: "signature verification failed". Here's one example:

Received message headers
        DKIM-Filter: OpenDKIM Filter v2.10.3 3rfbq51KBTz2xF0
                dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.b=XjB07H1q

But checking in ' dkim-stats', it says "PASSED"

opendkim-stats dkim-stats
        Job 3rfbq51KBTz2xF0 at edge (size 12124)
                received via at Wed Jun 29 01:45:37 2016
                from domain = ''
                Signature 1 from
                        signed bytes: (whole message)
                        Signature properties:
                        Key properties:
                        DNSSEC status: INSECURE

Here's the accompanying dump for that message

cat dkim.3rfbq51KBTz2xF0.4dDfiv
        Date: Wed, 29 Jun 2016 03:10:40 -0400
        From: "PROXYVOTE" <>
        To: USER_at_EXAMPLE.COM
        Subject: Semi-Annual Report
        message-id: <$A94546_1_519687362154ADDC_0154651$>
        Reply-To: "PROXYVOTE" <>
        MIME-Version: 1.0
        DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
;; q=dns/txt;
          s=edppsuirna01; t=1467189937; x=1498725937;

Why do I get 'fail' AND 'pass', and what do I need to do to fix this?

Received on Wed Jun 29 2016 - 16:05:15 PST

This archive was generated by hypermail 2.3.0 : Wed Jun 29 2016 - 16:09:00 PST