The description says Boolean values default to "false". It is redundant to state that the defaults for DomainKeyCompat and ResignAll are false.
MinimumKeysBits states "The default is 1024, which accepts all signatures. A value of 0 causes the default to be used." There are 768bit signatures today, so that 0 means indeed all signatures are checked, but 1024 -the default - does not mean that all signatures are checked.
ReplaceRule states 'This can be used to accommodate expected changes such as are made to From: fields by MTA "masquerade" features.' -- needs rephrasing.
ScreenPolicyScript states "The script has access to all of the header fields and connection information and can that certain signatures be ignored based on that information." This needs rephrasing.
TemporaryDirectory speaks about libdkim but means libopendkim.
Also StatisticsPolicyScript is not mentioned in opendkim.conf.5 , but in opendkim-lua.3 .
Attached is proposed patch.
Last edit: Dilian Wesselinov Palauzov 2017-11-11