DKIM (and SPF--and DMARC, oh my!)

[Joshua Judson Rosen]

On 07/29/2015 03:22 PM, Greg Rundlett (freephile) wrote:
> Thanks Joshua, now I know a lot more about DKIM!
> 
> (Let's not do what Yahoo! did.)
> 
> And by the sounds of it, we really don't have to do anything.

We may need to stop adding the GNHLUG list *footer* to messages,
since we apparently get messages with DKIM signatures over the body
(I'll miss it, but I suspect that the only people who actually
 read it are the people who don't need it...).

And if we get messages from any domains using DMARC + SPF,
then we probably need to do something more drastic.

If we upgrade to mailman 2.1.18 (which is in the latest
Debian release, BTW), that includes includes a
"dmarc_moderation_action" option that can basically
handle all of the ugly DMARC cases in however ugly
a way is necessary while letting the rest of the mail
pass through as unscathed as possible.

-- 
"Don't be afraid to ask (λf.((λx.xx) (λr.f(rr))))."