lieser / dkim_verifier

DKIM Verifier Extension for Mozilla Thunderbird
MIT License
213 stars 36 forks source link

You add-in says DKIM signing error, but my barracuda reported DKIM correct. #23

Closed fostervbv closed 10 years ago

fostervbv commented 10 years ago

Here is the message source. Did Barracuda or SmarterMail add entries that invalidated this signature, or is it a bug in your verifier?

edited by lieser: deleted e-mail

lieser commented 10 years ago

I have just tested it with another DKIM verifier, which also says the message has been altered. So the message probably has been altered, and it's not a bug in the add-on.

To be precise, at least one of the following e-mail headers has been altered: Date, From, To, Message-ID, Subject, MIME-Version, Content-Type, Content-Transfer-Encoding or DKIM-Signature.

Unless it was an malicious modification, which changed both the body and the DKIM-Signature, the body should be unaltered.

fostervbv commented 10 years ago

You are right of course. The Barracuda tagged it for quarantine, in part because the message had an empty subject line. Whenit sent it to quarantine, it put the [QUAR] keyword into the subject.

DF

From: lieser [mailto:notifications@github.com] Sent: Friday, January 31, 2014 12:23 PM To: lieser/dkim_verifier Cc: Doug Foster Subject: Re: [dkim_verifier] You add-in says DKIM signing error, but my barracuda reported DKIM correct. (#23)

I have just tested it with another DKIM verifier, which also says the message has been altered. So the message probably has been altered, and it's not a bug in the add-on.

To be precise, at least one of the following e-mail headers has been altered: Date, From, To, Message-ID, Subject, MIME-Version, Content-Type, Content-Transfer-Encoding or DKIM-Signature.

Unless it was an malicious modification, which changed both the body and the DKIM-Signature, the body should be unaltered.

— Reply to this email directly or view it on GitHubhttps://github.com/lieser/dkim_verifier/issues/23#issuecomment-33822694.