search

lieser / dkim_verifier

DKIM Verifier Extension for Mozilla Thunderbird
MIT License
213 stars 36 forks source link

Invalid (Wrong body hash) - presumably false #13

Closed barlone closed 11 years ago

barlone commented 11 years ago

Thanks for your work, but i have fased with little problem. Very ofter addon show text "Invalid (Wrong body hash)", but I'm really not sure that this is true. I`ve install postfix with OpenDKIM on my server and test it by sending messages to auth-results@verifier.port25.com and auth-report@appmaildev.com and no problems found. But my mails (with DKIM signature) sometime marked as "Wrong body hash". Not only my mails, I attach screenshot with mail from SourceForge with same error.

If need, i can send this "suspicious" mails to you.

EDIT Sorry but github does not want to upload my picture ("Something went really wrong and we can't process that image."). I can send on email.

lieser commented 11 years ago

Would be nice if you could send me the mails to dkim.verifier.addon@gmail.com. But if there is personal information in it that you don't wont me to see, we could also try to find the problem another way.

lieser commented 11 years ago

Thanks for sending me the e-mails.

I found the Problem for the GitHub and Mozilla e-mail. For some reason there was a “.” with two following newlines added. After I removed them, everything worked fine.

The SourceForge e-mail has the same thing added, but there seems to be another Problem, because it still says “Wrong body hash”. Maybe there is another altering that I haven't discovered yet, because another DKIM verifier is coming to the same result of “Wrong body hash”.

The next step would be to find out who is altering the mails. Against you mail provider yandex.net speaks that I have an e-mail form another user of yandex.net who had problems, which was not altered. Does the yandex web interface has a way to see the source of the e-mails?

As yandex.net is checking the DKIM Signatures of incoming e-mails and saving the result in the “Authentication-Results” header, you could as an alternative simply use an add-on that is displaying this header (MailHops is the only one I know which does this).