OpenDKIM icon indicating copy to clipboard operation
OpenDKIM copied to clipboard

Parameter ‘AuthservIDWithJobID’ produces invalid authserv-id

Open glts opened this issue 5 years ago • 0 comments

When option AuthservIDWithJobID is enabled, OpenDKIM produces authserv-ids in the format <authservid>/<jobid>.

Authentication-Results: mail.example.org/0C5B13F980; ...

Such authserv-ids are syntactically incorrect, unless quoting is used. According to RFC 8601, authserv-id is formally specified by the production value := token / quoted-string given in RFC 2045, section 5.1. token does not allow forward slash characters. If a forward slash is to be used, OpenDKIM should produce authserv-ids in quoted-string format instead:

Authentication-Results: "mail.example.org/0C5B13F980"; ...

This is important for downstream consumers, because they may otherwise reject OpenDKIM results as invalid.

glts avatar Oct 22 '20 08:10 glts