[ietf-dkim] domain keys, the h tag, and the reflector at sendmail.net

"dave" <dave.wanta@123aspx.com> Sat, 08 September 2007 03:30 UTC

Message-ID: <01a601c7f1c8$375885d0$0301a8c0@test93>
From: dave <dave.wanta@123aspx.com>
To: ietf-dkim@mipassoc.org
Date: Fri, 07 Sep 2007 22:27:40 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Subject: [ietf-dkim] domain keys, the h tag, and the reflector at sendmail.net
Precedence: list
Sender: ietf-dkim-bounces@mipassoc.org
Errors-To: ietf-dkim-bounces@mipassoc.org

Hi,
(If this isn't the right list, please let me know where I can ask this
question)

As an educational experiance, I'm writing my own domain keys signer. I'm
using the reflector at sendmail ( sa-test[at]sendmail.net ) for testing.
Everything is working fine, except when I try to use the "h" tag. Then my
domain-keys signature fails as BAD. I'm going off of the spec:
draft-delany-domainkeys-base-06, which I believe is the latest spec for
domain keys.

I hope I'm asking the right questions here, so, feel free to ask for
clarification.

It's my understanding that I use only the headers that are listed in the "h"
tag, and sign as if those were the only headers that existed.

for example, let's say I use the email sample found in the base-06 spec. It
has the following headers (hopefully this doesn't wrap too bad):

------------ Start Sample  --------
From: "Joe SixPack" <joe@football.example.com>
To: "Suzie Q" <suzie@shopping.example.net>
Subject: Is dinner ready?
Date: Fri, 11 Jul 2003 21:00:37 -0700 (PDT)
Message-ID: <20030712040037.46341.5F8J@football.example.com>

[body goes here]
------------ End Sample  --------

If the "h" tag is created like:

h="subject:from";

It's my understanding that I would actually sign this content:
------------ Start Sample  --------
Subject: Is dinner ready?
From: "Joe SixPack" <joe@football.example.com>

[body goes here]
------------ End Sample  --------

Is that correct? In other words, I concatonate the "subject" and "from"
headers (in that order), add my blank line, and then the body. I then sign
that combination.


Thanks!
Dave



_______________________________________________
NOTE WELL: This list operates according to 
http://mipassoc.org/dkim/ietf-list-rules.html

[ietf-dkim] domain keys, the h tag, and the refle… dave
Re: [ietf-dkim] domain keys, the h tag, and the r… Eric Allman