ietf-dkim
[Top] [All Lists]

Re: [ietf-dkim] My discardable statistics

2010-06-07 09:49:06


----- Original Message -----
From: "John Levine" <johnl(_at_)iecc(_dot_)com>
To: ietf-dkim(_at_)mipassoc(_dot_)org
Sent: Thursday, 3 June, 2010 3:44:59 AM
Subject: [ietf-dkim] My discardable statistics

I've been saving the DKIM signatures on mail sent to my inbox for
about the past year, so I did a little analysis on them. There's a
total of 71,000 signed messages that got to the procmail delivery
filter, signed by a total of 474 domains. I went through and looked
up the ADSP records for all of them. I found 51 ADSP records:


It appears that undp.org really is a branch of the United Nations, and
their mail management isn't very good. All four of those messages
came from the UNDP's mail servers, all four of them had return
addresses that appear to be individual users at undp.org, and all four
of them are spam or phish, presumably from botted PCs. Two of the
DKIM signatures verify, two don't, haven't looked hard enough to tell
why not, but they were broken when they arrived at my MTA. (Look at
the spamassassin lines, added at SMTP time.)

They're all in my spam archive, so you can look at them yourself:


Most UNDP country offices around the world are linked via VPN back to New York 
where their mail is processed, if I recall correctly.
_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html

<Prev in Thread] Current Thread [Next in Thread>