search

lieser / dkim_verifier

DKIM Verifier Extension for Mozilla Thunderbird
MIT License
213 stars 36 forks source link

Feature request: Please show the SPF result too, if desired #462

Open ell1e opened 1 month ago

ell1e commented 1 month ago

I tried out this addon, and it is an awesome security improvement given Thunderbird for some reason entirely ignores the Authentication-Results header!

However, when there's no DKIM header and an SPF softfail remarked in the Authentication-Results, then this addon currently just displays nothing. Instead of that, it would be nice if it actually displayed the SPF softfail since that seems like a pretty significant warning.

The addon options could maybe look something like this to make that easily configurable:

[ ] Verify DKIM signatures locally [ ] Save result of the local verification [ ] Show server DKIM check (Authentication-Results header) [ ] Show server SPF check (Authentication-Results header)

I don't really care what the defaults are, but it would be nice if SPF results could be enabled this way.

Oclair commented 1 month ago

wonderful feature addition idea!

lieser commented 1 month ago

Note that the add-on already has an option to show the DKIM header for all messages (https://github.com/lieser/dkim_verifier/wiki/Display-Options#show-dkim-header), which would allow you to see the SPF result in your case.

But I agree it probably makes sense to also add a new option in between the existing ones, that show the DKIM header if either a DKIM, SPF or DMARC result other than none is available.