trusteddomainproject / OpenDKIM

Other
97 stars 52 forks source link

Parameter ‘AuthservIDWithJobID’ produces invalid authserv-id #103

Open glts opened 4 years ago

glts commented 4 years ago

When option AuthservIDWithJobID is enabled, OpenDKIM produces authserv-ids in the format <authservid>/<jobid>.

Authentication-Results: mail.example.org/0C5B13F980; ...

Such authserv-ids are syntactically incorrect, unless quoting is used. According to RFC 8601, authserv-id is formally specified by the production value := token / quoted-string given in RFC 2045, section 5.1. token does not allow forward slash characters. If a forward slash is to be used, OpenDKIM should produce authserv-ids in quoted-string format instead:

Authentication-Results: "mail.example.org/0C5B13F980"; ...

This is important for downstream consumers, because they may otherwise reject OpenDKIM results as invalid.