[Mailman-Users] cause of bounces

[Mark Sapiro]

On 10/17/2017 03:28 PM, Dimitri Maziuk wrote:
> On 10/17/2017 04:40 PM, Grant Taylor via Mailman-Users wrote:
>> On 10/17/2017 03:22 PM, Mark Sapiro wrote:
>>
>>> In other words, an invalid DKIM signature SHOULD be treated no
>>> differently from no signature.
>>
>> Fair enough. 
> 
> Why? If this message doesn't match its signature, then it has been
> altered in transit for sure. If were not signed, like when I post from
> home (because I can't be arsed to set gpg up on winderz), then there's
> no telling if it was or wasn't. One of those things is quite a bit not
> like the other.


Why? Because that's what the DKIM standard, RFC 4871, says.

You have a point, but to be safe you should assume that unsigned mail
has been altered and if it's important, insist on some kind of
cryptographic verification.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://mail.python.org/pipermail/mailman-users/attachments/20171017/0b956486/attachment-0001.sig>