search

emersion / go-msgauth

🔏 A Go library and tools for DKIM, DMARC and Authentication-Results
MIT License
168 stars 52 forks source link

dkim: add SignOptions.BodyLength #3

Closed emersion closed 4 years ago

emersion commented 7 years ago

As discussed in https://tools.ietf.org/html/rfc6376#section-8.2, this should be used with care.

Maybe we should just choose not to support this, given the security issues it implies.

foxcpp commented 4 years ago

I vote for not supporting it. maddy considers signatures with body length limit invalid by default.

emersion commented 4 years ago

Yeah, I agree.