IETF Logo Mail Archive

[Ietf-dkim] Re: I-D Action: draft-ietf-dkim-dkim2-spec-03.txt

Tobias Herkula <tobias.herkula@1und1.de> Mon, 29 June 2026 14:37 UTC

Return-Path: <tobias.herkula@1und1.de>
X-Original-To: ietf-dkim@mail2.ietf.org
Delivered-To: ietf-dkim@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 86B4D109DE4D0; Mon, 29 Jun 2026 07:37:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782743860; bh=UJribQRIa6pFKPThHhFIlfNHzQgkJDpPkGqDVIZ6MlA=; h=From:To:Subject:Date:References:In-Reply-To; b=KxRXopSbVTKVm42TEcr3PNqHHuMxA77kFjE/CFaVA70Q5SYUvwjllrj6iu0x60eMx SeXiUO2saz5huEYX5I+AgdTnNUynro2pdHGnyBz6nSm7NSsESNd+1Nnd/H/hBc3M3M ox38YBxP7suBasBrR5gfioCEouaZhl8ebcCpsR4Q=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=1und1.de
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HA7gFWsVTuGq; Mon, 29 Jun 2026 07:37:39 -0700 (PDT)
Received: from moint.1and1.com (moint.1and1.com [212.227.17.7]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 73CEA109DE2F3; Mon, 29 Jun 2026 07:36:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=1und1.de; s=corp1; h=MIME-Version:Message-ID:Date:Subject:To:From:cc:sender:reply-to; bh=UJribQRIa6pFKPThHhFIlfNHzQgkJDpPkGqDVIZ6MlA=; b=os2M8BQROLc3lHqI3OeO8tBz3t z/1oNUKawaKHg+NylRIFrlI1P2rvOI9Xu7ZTb2P+jMJFHvkccj9Zrm+Hie1v6ZLReLYIy25EkAoWy Pj/4Mxt/6Rgxp16sVs43aOVdkGLakvsUMeKhXVQ3HishTewpLTN5d3AksoJD1JoPboGQ9V0HceQyC k1QOCbIsUmzJxvYqRQzivKPdL+ZTWvpbNFDmFdOtUMU/CBSMIrGtIeWKHX6WKAFCAqlN/2lJT47gZ GbxVUvlKPmacxjeT8P+O2SSrwMoUqTQEtikPixOmABkQzDHh7P1oPY02L+rTaVM4dJIj/z/ZFWxsw 2LDaV5Wg==;
Received: from [10.98.28.9] (helo=KAPPEX024.united.domain) by mrint.1and1.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <tobias.herkula@1und1.de>) id 1weD5n-003eKT-2q; Mon, 29 Jun 2026 16:36:12 +0200
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=SMqrY3cFIw5sKnlyPaiwaF3Smw0NFdrn8MfIAjhlBNq0CFkQqlMcG4W6zZKrYHDiga47gOiCoiDZrU5HO2VC+Bq08tPvFOCgT77SiUHxo8cu+18Za6SKYgpigSUieuBS67z6ZEJT0/qWpT29U/TQJGRoDOkkGMLjFvkn4Q5AMbkNl1sIv3eY+TWe/GuRUjXZxt+eJyd1KYurkhAhxYBPYv4ZtYJXpA+p9ZqQvTEMBhfWBbnpgbbv2Y/SSB9SA/LcKd3hiG0ueyLEf+F7plMCt1yxaqiZrSaOJsE2NxWiczHpz2VrF6RcY8U0fAtjVxDsU5vjgqSfhWFQP7iYH10InQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=UJribQRIa6pFKPThHhFIlfNHzQgkJDpPkGqDVIZ6MlA=; b=bvChwLIelFGUD70yV+tUBbVfxp+cDfeupzRqUM6HJFpUKbe6GD7rTS3L158NEv1qWVAezMGzEaU2pfWexqUkz70ClTDw8HDzkE8Y/yyqY/d4OpvavxZOzYy/+RTLrRFsK4SpFzBpTNM4kT6amKTfT8AGgeYgq/eZe3lYeClgaNV5iWfI0JnhOAYht8zn0ioj3q2oR0IIyQQB2CfnkGU+VycZBfs/uztwfK0lCZm83uIxWebQAxcI2lNGgbQgdYss+P1wSEPAdQ535A+JU/W5WdlFedbpRO1yRFWyjxVS7esNLiX/P/lLPE20caARY2JV0bXfXCaJSb5CmEz/B2uDQw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=1und1.de; dmarc=pass action=none header.from=1und1.de; dkim=pass header.d=1und1.de; arc=none
From: Tobias Herkula <tobias.herkula@1und1.de>
To: Bron Gondwana <brong=40fastmailteam.com@dmarc.ietf.org>, "ietf-dkim@ietf.org" <ietf-dkim@ietf.org>
Thread-Topic: [Ietf-dkim] Re: I-D Action: draft-ietf-dkim-dkim2-spec-03.txt
Thread-Index: AQHdBA0ygOYRBQkdVEWeMjayJBcuV7ZVcxQAgAAJp4CAACL2TQ==
Date: Mon, 29 Jun 2026 14:36:00 +0000
Message-ID: <FRYP281MB215649FF216B313355CF022EEAE82@FRYP281MB2156.DEUP281.PROD.OUTLOOK.COM>
References: <178232634716.1360785.12363329888242618970@dt-datatracker-f9b87776f-xzl65> <LkyxfvBYsCPqFA4b@highwayman.com> <83b544d8-c38f-49e1-83d1-9ce5ac9c964c@1und1.de> <b095680f-b61f-49b6-a5dc-b542d2939495@app.fastmail.com>
In-Reply-To: <b095680f-b61f-49b6-a5dc-b542d2939495@app.fastmail.com>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=1und1.de;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: FRYP281MB2156:EE_|FR2P281MB0281:EE_
x-ms-office365-filtering-correlation-id: fad1ec3d-109f-4ac8-c4f8-08ded5ebbd5d
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|23010399003|8096899003|22082099003|18002099003|56012099006|38070700021|11063799006|4143699003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:FRYP281MB2156.DEUP281.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(23010399003)(8096899003)(22082099003)(18002099003)(56012099006)(38070700021)(11063799006)(4143699003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: MBbHPYpzUWiRJPXMzksHpz5LEQ7yJ0og1YC3ZRcjT4b9AftnmaxUc0173GCVEpECYGm3uA5o81nUZShmO/KYDLQ9R/D6e1dwuO1h9NIeHwd87Zq4rSsZl+AoJ2dszKdAL3ovhB/3oAVwo9/OjdRhRy6HpVMY6J/ctOArHZkfnlMaKNnJG3nBbbAgMBG1AcUUxk8eofrIPZGtM5bzQxnBdRuAFtw6vPVYgRLrp2jRuYIAnaoY6aRMgKQxDy7xJaPVIqyEHuW2zCOMEXWNShQZvPcFrZmbzmRcx4RTyWesSWfYh86PsxxsnPMSXFQXdcamIBs6vjoGVGgjuG+wExRjB9VgGGiSXVzj0N3eB+NOeLkW2e9pPwF9MtyBomJ1roYh19DVudUjaGMgSCrEs4iq5sKNc+kGvcX51vLw+E5tVP+9ByeyggpJ6vvou8enSqf2eRzwaCpg40u0PcmP7OmzRte6516DqGAEvMwH9lWu+gOs4aMcjTDvVOBg5Mz2vZVaAXoInnfCJxzCFNQnC8Bk7gquiz9zcmTdcL/c0QCReOsCcd69vFbVeN7oCvbqt0dS9nbrSRhOYBQPyXDiL6FWJJ4fp4WKlcASkIwh/cur96XMSL3kaLp3PZ5vQCY5MeWn7BihB8nX4QeR1V2A8vOE0qlj4zyePO+x7/BcdtUdET45f7F/6KjLnvjwBPjFF0Wax2LiMUr3EYiea35j5ExoYZkc0+99OUuN7bnoj00JbAZI4ERY+kIngpqNIUAuMiG+zi8O6fQ7HVSX72MS8zL8qlHFkWve9wRp3fbu6I8q9rGKheyqAbFDBAs56P+2XM9KZPu/JSuvuMA+ZKrgD2Vytp1B8dVQxxdxjUisLnXpf/+ilb7DQUgm0Wmj++465qoCqoWRp1YvWRWAWZf+0ONLrMtmvY3IQziIocikq2bq0z/38SAXOfjXRHnTz030tO62YENXQxjo/GkQOS7Esiw7hXJXVwxrv1ktmeaKRaAW49r3rnXqievIZyQsFUxgjSk4IA+iNZlL7+0Vh3VxUIr6RoDSBCMxZ3H+zHU9OVDeP+3K24zfMdt2PC/V0iRKkYyDNDx3EG2Ak+DYbwZR7yIp/4Ug0ySQFtvbHPO+LqC9+BMTBY+WIMcY/VfUuBKF6LDnf9hzR4qcNEAoyPxDR6SblG8jczRrt7J44JD0Qo0pzBnecpIK+RSDhS/nX8YVEO3bhavHSUPvbfGCm6uCIz/Hr7ReKFZE1j42DUZhOZM9thm7xYnR8lkuMv1O2x2ur10rTcNj23YkVcuCVmANeCixD/GAuDjRQbwVIs6Qx09OEHjD/LIg3FL6+kRFyVn03mcrWNwdsu98eSkkteNSUd6vPG8bYkhYI9YrimYRh+zzpfUPQg3BGAhL/dB4nlD58V2YMWUOI4fVBWRsjpgy3goyXJEbLCmeYE/8VMbSF6iH3j0HCTXS7YloTdoA0QvCd3b/nUY53UjqHhU8Pf5JIpuAQOhlCryXSD5Tzzvtkq3Oiz13kM1YbpJZDrwX1Qo18ELuF3CtZKk3PgT4Un8RScYlP0NSeclkTw88DSH+2iwoG5WFYRFaSn5YmiUWIpBB8V+H7sobpGUyf00uV4o46zZAnLGyWVFGqhuKuMNkgVPUr4+ShAa6zIsKd/vPGDgOdKKtqiD6033Q44XY14joPIVHtmSFfTODOusZummMlvZL/qhvntjAYLnPaEMvqEFSJiKlpc8SvRFq624Me5hsYaPZQQ==
Content-Type: multipart/alternative; boundary="_000_FRYP281MB215649FF216B313355CF022EEAE82FRYP281MB2156DEUP_"
MIME-Version: 1.0
X-Exchange-RoutingPolicyChecked: KjvHjKw8dDTO3GBxs52WUlbar7E9z/d1OkTQDXSEpwqlnehgqLRYs7odZDNh2p+Yu3TVBJDYk/vsN+FqBjiDwU0ZAFxU9DtdSfG/yVhPJFCzU32+3GJTaHWKtXWXG3AKokLY/4X8vedv6buc7Ms54RhHBj7VxvN3IFuKyyvzPFuZDu74NNeIrWECsXgo6gmcHVE3kH3UkKxcQf/PjUq/B59k0+5X8NsqXiW2QHvqcxGCr6yNJdItYvfZgp1soRZrdFCHAX09IzqwxfzstyH96bYkvdNe22k1dpsydB/ai35Pnpluhg8jcoSLr3rFyJiMCICShNAPksjH6ykUtO7/UQ==
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: FRYP281MB2156.DEUP281.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: fad1ec3d-109f-4ac8-c4f8-08ded5ebbd5d
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jun 2026 14:36:00.4197 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 4336ed25-a33e-4aab-92ed-3e7fae3bb2fd
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: /BLr8ploGuDYivrpRPWm8bTM57RDhkjsxWn28IdRYNJa2fHB/PdRTOfbS/AKINEV9IHBtGrfckc/b0rV0axGjA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR2P281MB0281
X-OriginatorOrg: 1und1.de
X-Virus-Scanned: ClamAV@mvs-ha-bs
Message-ID-Hash: C7VAXB7LAY6BARWE2MNOEGCLOZIJ7C6R
X-Message-ID-Hash: C7VAXB7LAY6BARWE2MNOEGCLOZIJ7C6R
X-MailFrom: tobias.herkula@1und1.de
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ietf-dkim.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ietf-dkim] Re: I-D Action: draft-ietf-dkim-dkim2-spec-03.txt
List-Id: IETF DKIM List <ietf-dkim.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-dkim/nLzsRU9HEEelOugYbS1iH6uXBxU>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-dkim>
List-Help: <mailto:ietf-dkim-request@ietf.org?subject=help>
List-Owner: <mailto:ietf-dkim-owner@ietf.org>
List-Post: <mailto:ietf-dkim@ietf.org>
List-Subscribe: <mailto:ietf-dkim-join@ietf.org>
List-Unsubscribe: <mailto:ietf-dkim-leave@ietf.org>

I think your example contains an error as ND should allow

From: Bron Gondwana <brong=40fastmailteam.com@dmarc.ietf.org>
Sent: 29 June 2026 14:25
To: ietf-dkim@ietf.org <ietf-dkim@ietf.org>
Subject: [Ietf-dkim] Re: I-D Action: draft-ietf-dkim-dkim2-spec-03.txt
...


i=4 rt=foo@X
i=5 d=X; nd=Y
i=6 d=Y; mf=bar@Y

...

As my intention for ND was that something like this would be allowed and mbp.example would see this:

i=1 d=acme.example mf=info@acme.example rt=user@mbp.example nd=esp.example
i=2 d=esp.example mf=verp-srs-or-whatever-do-not-mind@esp.example

/ Tobias

v2.46.0 | Report a Bug | By Email | System Status