OpenDKIM
OpenDKIM copied to clipboard
Apologies if this has already been addressed, but a paper in last year's USENIX Security Symposium details 18 practical attacks against Email Sender Authentication. It's brutal. For details, see: https://www.usenix.org/sites/default/files/composition-kills.pdf...
Running `configure` ends with: ``` checking for openssl/pem.h... yes checking openssl/rsa.h usability... yes checking openssl/rsa.h presence... yes checking for openssl/rsa.h... yes checking openssl/sha.h usability... yes checking openssl/sha.h presence... yes checking...
opendmarc has been emitting these warning messages for quite some time, and does not further process the AAR header: ignoring invalid ARC-Authentication-Results header "i=1; mail.example.com; dkim=pass (2048-bit key; unprotected) header.d=mail.example-sender.com...
rather than a hardcoded openssl version check, for openssl 3.0+ compatibility.
Some MUAs violate the SMTP RFC and send mail with lines longer than 1000 characters [1]. In the case of postfix, these lines are forwarded as-is to the milter[2], only...
opendbx has not had a release nor any code changes since 2014. It appears quite dead. The former Fedora maintainer for it gave it up. http://soci.sourceforge.net/ may be an appropriate...
This is to inform that Opendkim was broken on OpenBSD 6.7 and is still broken on OpenBSD 6.8. I am referring to https://github.com/openbsd/ports/tree/master/mail/opendkim. This is the result from the tests:...
The opendkim.conf(5) manpage states in the "OversignHeaders" section: Note that listing a field name here and not listing it in the SignHeaders list is likely to generate invalid signatures. That...
Without this change, the canonization of a header like Name:\r\n\tValue wrongly leaves a space after the colon, and causing the signature to be rejected.
I have a filter running at a large shop that is configured for signing only (via "Mode s" in opendkim.conf) and uses a SigningTable and KeyTable. Until recently, this job...