![](https://seccdn.libravatar.org/avatar/77cb4da5f72bc176182dcc33f03a18f3.jpg?s=120&d=mm&r=g)
4 Dec
2020
4 Dec
'20
14:48
On 04/12/2020 15.43, Andrei Borzenkov wrote:
04.12.2020 17:35, Michal Suchánek пишет:
But reading RFC 4871:
Entities such as mailing list managers that implement DKIM and that modify the message or a header field (for example, inserting unsubscribe information) before retransmitting the message SHOULD check any existing signature on input and MUST make such modifications before re-signing the message.
IOW mailman /could/ check existing DKIM signature, insert ARC header that confirms that message was successfully validated and then add DKIM-Signature header that covers modified message.
WOW :-DDD I like that idea. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)