Menu

#283 Previous (self) DKIM signatures are not removed

2.10.3
open
nobody
None
5
2023-11-03
2023-11-03
Greg Troxel
No

This is an odd edge case but I think it's a bug in opendkim. If a message is submitted and already has a DKIM signature from this host, that signature remains and new one is added. This is at best slightly confusing. I think the right behavior is to omit any DKIM signatures that are from the domain used for signing.

Environment: NetBSD 9 amd64, postfix, opendkim 2.10.3, emacs 28/gnus.

Reproduction recipe:

  • In gnus, compose and send a message to an address that will bounce (e.g. a mailing list where you aren't a member).
  • receive a bounce message
  • use "S D b" gnus-summary-resend-bounced-mail to prepare a new message with the content fromt he bounced mail (which will include the DKIM header)
  • C-c C-c to send
  • recipient sees two DKIM signatures - the one from the attempt that bounced and the second send

One can claim that gnus should remove the DKIM signature and probably some other headers. That is likely valid, but I think it is also true that opendkim should remove signatures with d= the same domain as it is configured to send.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB