dkim-ops
[Top] [All Lists]

Re: [dkim-ops] FYI: protecting subdomains in signature with dkimproxy

2009-02-05 00:32:08
Murray S. Kucherawy wrote:
On Tue, 3 Feb 2009, Byung-Hee HWANG wrote:
Yes, that's true. The Google's reporting was 
"header(_dot_)i=smith(_at_)dkim(_dot_)edu" 
;; But i can understand Google's reporting. As we can see above, we 
can copy "i=" tag's value into the signature easily. Therefore, i 
guess Google take "d=" tag as real identity instead of "i=" tag.

That's still incorrect.  "header.i" is required to be the value of the 
i= portion of the DKIM signature. Substitutions aren't permitted.

OK Murray, i know your tone of word (Substititions aren't permitted). 
*Also* i want to keep RFC4871 as correctly as possible. However, there 
is not a rule protecting subdomains. That's the real object of my email.

byunghee
_______________________________________________
dkim-ops mailing list
dkim-ops(_at_)mipassoc(_dot_)org
http://mipassoc.org/mailman/listinfo/dkim-ops