[Mailman-Users] Mailman, DMARC and OpenDKIM

[Lindsay Haisley]

On Sun, 2014-04-27 at 10:34 -0700, Mark Sapiro wrote:
> On 04/27/2014 10:16 AM, Lindsay Haisley wrote:
> > My understanding is that DMARC alignment depends on both SPF and DKIM
> > and that if a test using either protocol passes, then a DMARC will pass.
> > This is probably an oversimplification, but I'm exploring the idea of
> > whether it might be possible to interpose a milter using OpenDKIM
> > (perhaps zdkimfilter) between Mailman and the outgoing SMTP server
> > (courier-MTA) so that outgoing list posts are appropriately signed.
> 
> 
> This doesn't help. The whole idea behind DMARC is the message must pass
> either SPF or DKIM with a domain that 'aligns' with the domain of the
> address in the From: header.
> 
> You can't DKIM sign for the yahoo.com or aol.com or whatever.com domain
> because you don't know their private keys. You can only DKIM sign for
> your own domain which won't 'align' with the From: domain.

OK, Thanks Mark.  This makes sense.  No need for anyone else to post a
reply to my post.

-- 
Lindsay Haisley       | "Everything works if you let it"
FMP Computer Services |
512-259-1190          |          --- The Roadie
http://www.fmp.com    |