Closed bernieEV closed 1 year ago
oops, I forgot the hint for ORANGE case: From is not in the signed domain what is going on here with the i= field ?
If you did not change the color highlights orange means the signature has warnings. Like you seem to have already found out the warnings are shown if as a tooltip of the warning icon.
So why has your second email From is not in the signed domain
?
Note that it has two DKIM signatures. One signed by nubert.de
, for which this warning does not make sense. And one signed by inxserver.com
, which is a different domain than the from address.
You did not mention which of the two signatures the addon shows in the GUI, but my guess would be the one from inxserver.com
?
This mean that the one signed by nubert.de
fails to verify, which is why the add-on rather shows the one that that verifies, even if it is with warnings,
You should take a look at the error console, which should provide more information why the addon fails to verify the DKIM signature by nubert.de
.
See also https://github.com/lieser/dkim_verifier/wiki/Debug#view-error-and-debug-messages.
thanks for the tip with the console and here are the details.
E-Mail from nubert.de
:
At the verification time there was a DNS error for getting the DKIM key for the signature by nubert.de
. Unfortunately that result was saved, something that should probably be improve in the future.
You need to manually trigger a reverification (https://github.com/lieser/dkim_verifier/wiki/Options#save-result-of-the-verification), in the hopes the DNS error disappears this time.
E-Mail from github.com
:
You changed the setting to be warned about more unsigned headers that could affect how the e-mail is shown (https://github.com/lieser/dkim_verifier/wiki/Options#warn-about-unsigned-headers-that-are-recommended-to-be-signed). Unless you are an advanced user you probably don't want to enable the strict mode as it will only distract you from more relevant warnings without you being able to interpret the impact of all this warnings about missing signed headers you will see.
I would recommend you go back to the default recommended mode. Note that here too you will need to manually trigger a reverification.
As you haven't replied yet I'm assuming your questions are answered. If not please reopen the issue.
GREEN colored FROM field:
ORANGE colored FROM field:
thanks