that leads me to suspect that maybe Yahoo is really officially
carrying BellSouth customers' email.
Yes, Yahoo handles much if not all of the mail for AT&T's ISP subsidiaries.
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bellsouth.net;
s=s1024; t=1251295577;
bh=AWurPyCfrWyL7Q4VoVf/3EwEKj++xepXQ72Z/H6SNU0=;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=NtTZuqgd...
The problem is that bellsouth.net has no selector named s1024. However,
yahoo.com does:
Right. It's a bug at Yahoo's end.
But it's also a bug at your end, since the DKIM spec is quite clear
that a signature that can't be verified is equivalent to no signature.
Your fix was the correct one, turn off the buggy code that rejects
mail on a DKIM DNS lookup failure.
R's,
John
_______________________________________________
dkim-ops mailing list
dkim-ops(_at_)mipassoc(_dot_)org
http://mipassoc.org/mailman/listinfo/dkim-ops