DKIM signature rejected

[googly.negotiator862 at aceecat.org]

On Sat, Feb 22, 2025 at 01:06:16PM +0100, Matthias Apitz wrote:

> The following bug has been logged on the website:

> i.e. the header lines of List-* are part of the DKIM signed lines.

> I can't change this, as the signing is done by the MTA of 1blu.de. I
> raised a ticket there, but without any luck until now.

> On the other hand, the RFC 6576 explicitly allows this, see the
> chapter

>   A Forwarder that does not modify the body or signed header fields
>   of a message is likely to maintain the validity of the existing
>   signature.  It also could choose to add its own signature to the
>   message. ...

I don't know specifically about the postgres list ATM, but 90% of
lists nowadays do modify the body *and* the Subject header which is
usually signed.  The mutt list is one of the 10% exceptions.

I agree that it is a bug, but then so is the very existence of
DKIM. ;-)

-- 
Ian