OpenDKIM icon indicating copy to clipboard operation
OpenDKIM copied to clipboard

Results 154 OpenDKIM issues
Sort by recently updated
recently updated
newest added
trafficstars

Apologies if this has already been addressed, but a paper in last year's USENIX Security Symposium details 18 practical attacks against Email Sender Authentication. It's brutal. For details, see: https://www.usenix.org/sites/default/files/composition-kills.pdf...

Running `configure` ends with: ``` checking for openssl/pem.h... yes checking openssl/rsa.h usability... yes checking openssl/rsa.h presence... yes checking for openssl/rsa.h... yes checking openssl/sha.h usability... yes checking openssl/sha.h presence... yes checking...

need-logs
compatibility

opendmarc has been emitting these warning messages for quite some time, and does not further process the AAR header: ignoring invalid ARC-Authentication-Results header "i=1; mail.example.com; dkim=pass (2048-bit key; unprotected) header.d=mail.example-sender.com...

rather than a hardcoded openssl version check, for openssl 3.0+ compatibility.

Some MUAs violate the SMTP RFC and send mail with lines longer than 1000 characters [1]. In the case of postfix, these lines are forwarded as-is to the milter[2], only...

needs-discussion

opendbx has not had a release nor any code changes since 2014. It appears quite dead. The former Fedora maintainer for it gave it up. http://soci.sourceforge.net/ may be an appropriate...

This is to inform that Opendkim was broken on OpenBSD 6.7 and is still broken on OpenBSD 6.8. I am referring to https://github.com/openbsd/ports/tree/master/mail/opendkim. This is the result from the tests:...

bug
compatibility

The opendkim.conf(5) manpage states in the "OversignHeaders" section: Note that listing a field name here and not listing it in the SignHeaders list is likely to generate invalid signatures. That...

enhancement
good first issue

Without this change, the canonization of a header like Name:\r\n\tValue wrongly leaves a space after the colon, and causing the signature to be rejected.

I have a filter running at a large shop that is configured for signing only (via "Mode s" in opendkim.conf) and uses a SigningTable and KeyTable. Until recently, this job...

bug
enhancement