search

RainLoop / rainloop-webmail

Simple, modern & fast web-based email client
http://rainloop.net
MIT License
4.09k stars 881 forks source link

DKIM & SPF #317

Open nerzhul opened 9 years ago

nerzhul commented 9 years ago

Hi, DKIM and SPF became useful and used on the Internet.

It will be cool if rainloop could add a check when showing the mails to verify if SPF and DKIM states are correct and tell the user by a green tick that the mail comes from a verified source.

Thanks in advance

ghost commented 9 years ago

+1

rbeuque74 commented 9 years ago

:+1:

robertol commented 9 years ago

+1

bms8197 commented 9 years ago

that would be really cool! +1

fpeterschmitt commented 9 years ago

+1

namezk commented 9 years ago

I think this is really the job of the MTA not RainLoop.

bms8197 commented 9 years ago

It is the job of the MTA but in order to have that displayed for your email message in rainloop, I guess it's rainloop's job

nerzhul commented 9 years ago

In my request i would mean interpreting DKIM and SPF field in mail header, not testing these mechanics, it's MTA job.

ghost commented 9 years ago

+1

nuxwin commented 9 years ago

Such useless thing... I could understand if you asked for SPAM flag but for SPF and DKIM signature....

ghost commented 9 years ago

I don't know if you know but this is already implemented...

minami-o commented 9 years ago

Indeed, in changelog of version 1.8.0 (http://www.rainloop.net/changelog/#1.8.0), dkim status is mentioned. However, I can't find any options or settings, either in the config files or the admin panel, to enable it, and obviously it is not enabled by default, is it? Could you please send some detail about the functionality and how to enable/see/implement it? Thanks in advance!

17 mars 2015 14:14 "Pedro Damazio" a écrit: I don't know if you know but this is already implemented...

—

Reply to this email directly or view it on GitHub (https://github.com/RainLoop/rainloop-webmail/issues/317#issuecomment-82339220).

ghost commented 9 years ago

@minami-o It's enabled by default, there's no setting for it. As long as you have DKIM set, a green checkmark will be visible next to your email. I don't know if this is by default but, to test it, you need to send an email to another account (domain). Sending a test email to another alias on your domain, won't show anything.

minami-o commented 9 years ago

Aha... Thanks for your help ! Indeed, it looks like my setup of DKIMProxy uses the X-Spam-Status  header entry to determine if a DKIM record is valid. This is well recognized by RoundCube, but RainLoop only recognizes the following headers at the moment:  * Authentication-Results, whose syntax I'm not sure of, it should at least contain something like dkim=recordstatus  * X-DKIM-Authentication-Results, which uses a simple syntax as explained in the RainLoop code: signer="domain" status="recordstatus", where domain is the signer domain and recordstatus is the status of the DKIM record, ie. pass, none or failed. Manually changing a mail to include such header indeed resulted in a small "checked" sign next to the email address. I'll have a look at my DKIMProxy setup to see how to use these headers instead of or in addition to the X-Spam... one. I'll post anything useful here. Thanks again for your help, Pedro!

18 mars 2015 11:38 "Pedro Damazio" a écrit: @minami-o (https://github.com/minami-o) It's enabled by default, there's no setting for it. As long as you have DKIM set, a green checkmark will be visible next to your email. I don't know if this is by default but, to test it, you need to send an email to another account (domain). Sending a test email to another alias on your domain, won't show anything.

—

Reply to this email directly or view it on GitHub (https://github.com/RainLoop/rainloop-webmail/issues/317#issuecomment-82887795).

ghost commented 9 years ago

No problem. Since I'm on shared hosting I just generated a DKIM key in cPanel, not sure how to set the headers manually.

minami-o commented 9 years ago

OK in the end it occurs I was using the dkim plugin provided by SPAMAssassin, which generates these X-Spam headers. I enabled the dkimproxy.in service, and like magic, the Authentication-Results header appeared in my incoming mail.

ghost commented 9 years ago

:+1:

ervee commented 9 years ago

@RainLoop, can you add to the DKIM test to check for something like DKIM_SIGNED,DKIM_VERIFIED in the X-Spam-Status header to make this work with Spamassassin?

nerzhul commented 7 years ago

@RainLoop i think this issue is partially solved no ?

tuxmartin commented 3 years ago

Hi, can you please add SPF and DMARC status icons?

You can get it from headerX-Spam-Status.

X-Spam-Status: No, score=-0.201 tagged_above=-9999 required=5
    tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1,
    DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, NO_RECEIVED=-0.001,
    NO_RELAYS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001]