IETF Logo Mail Archive

[Ietf-dkim] Re: Signing headers in DKIM2

Bron Gondwana <brong@fastmailteam.com> Tue, 30 September 2025 16:50 UTC

Return-Path: <brong@fastmailteam.com>
X-Original-To: ietf-dkim@mail2.ietf.org
Delivered-To: ietf-dkim@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 0F3586B5209A for <ietf-dkim@mail2.ietf.org>; Tue, 30 Sep 2025 09:50:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.798
X-Spam-Level:
X-Spam-Status: No, score=-2.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=fastmailteam.com header.b="WjJTAi9m"; dkim=pass (2048-bit key) header.d=messagingengine.com header.b="JEfW5Dnx"
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cOwqQ3yLgIAE for <ietf-dkim@mail2.ietf.org>; Tue, 30 Sep 2025 09:50:17 -0700 (PDT)
Received: from fhigh-a7-smtp.messagingengine.com (fhigh-a7-smtp.messagingengine.com [103.168.172.158]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 21DF66B52087 for <ietf-dkim@ietf.org>; Tue, 30 Sep 2025 09:50:10 -0700 (PDT)
Received: from phl-compute-02.internal (phl-compute-02.internal [10.202.2.42]) by mailfhigh.phl.internal (Postfix) with ESMTP id 82AB91400126 for <ietf-dkim@ietf.org>; Tue, 30 Sep 2025 12:50:03 -0400 (EDT)
Received: from phl-imap-15 ([10.202.2.104]) by phl-compute-02.internal (MEProxy); Tue, 30 Sep 2025 12:50:03 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= fastmailteam.com; h=cc:content-type:content-type:date:date:from :from:in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm3; t=1759251003; x= 1759337403; bh=Ra4fDdcxn14jv7r0acAkCWG15bXAu4z/PydOgrYL8Ys=; b=W jJTAi9mz6zXq7zre6VrhVIykwQzkoA3qVUt5GX+J69LVnmBCZck9x5MBz6/oDIMd fOukfneEj86Dz4AX+B40sD2g2CNM8QgEUCeAmUKKEurRNaNvy976ciP0DCpkrY8f A+VF7Wnj+SIO7ShWSuwF9HN5LxL8MAuUQ6a4C7AAG5f1JYdB/+mZcAUtrW3PhSRm oePd6KVxQB+CWl1Z2QTR+/oMroJQBbomwJaE9nCRLcx8s2l3jesBphymYqMv/H2v Q+wY2FugIo4/HPKMZJzx/b1w0XtxmTwQ8YQRL2Ub0IlkZvtlDrF7ftM4ThDOefqq kiSuHw54yzstUDFJ8dpqA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; t= 1759251003; x=1759337403; bh=Ra4fDdcxn14jv7r0acAkCWG15bXAu4z/Pyd OgrYL8Ys=; b=JEfW5Dnx4yrBMCwmNYERI0lxh5ovUoHoVT6zAL6qYWpcoJRB4Yt VXxwpAlBbMlJEuGMGnxQxpJttngH+uO1IWaDZTNkHmNZWCPod2dsKhSR7J6ydUct neqeI0JGMyEIfP6s/36bsPH/4I0x8muNgb4MnTkCR3ToefuALx2nEK1JNIJVALNq c0xF4XLkeVXIs6WV3+hjSI+HfCktqQBmOf7AE0FRggdhb+bTdMuLXfgxrvpJg5oP lTsMDa7fFEchT4O9jD7DSlDP05nrO8uI/rm87JGKUSmDjNMiaqTnStdVTDJ0v4qn hRZOGm2PPuLfoN/fUF9pxPhu/m7C7yYYn6w==
X-ME-Sender: <xms:OwrcaAligPHmL9xb8e3kdUKhwSa0l6TvygERgvEj0eRS-zKcbBFyEQ> <xme:OwrcaKqnmDVHBod5ph8BgWq3CwBcEZ97UHKdR7ZeXgQjXRalxmCXRtTcWgMb5MpvR XXR92w4ABTg6VHd1We4q6jH20TZbPB8RO56hrPnrHfJmEaZ>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtdeggdekudefgecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpuffrtefokffrpgfnqfghnecuuegr ihhlohhuthemuceftddtnecunecujfgurhepofggfffhvffkjghfufgtsegrtderreertd dtnecuhfhrohhmpedfuehrohhnucfiohhnugifrghnrgdfuceosghrohhnghesfhgrshht mhgrihhlthgvrghmrdgtohhmqeenucggtffrrghtthgvrhhnpeefveejveekudekffffve evueetfeehuedufefftefggefhheelteelgeeghefftdenucevlhhushhtvghrufhiiigv pedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpegsrhhonhhgsehfrghsthhmrghilhhtvg grmhdrtghomhdpnhgspghrtghpthhtohepuddpmhhouggvpehsmhhtphhouhhtpdhrtghp thhtohepihgvthhfqdgukhhimhesihgvthhfrdhorhhg
X-ME-Proxy: <xmx:OwrcaEIFG41mkYkFZ9LDjhcGhmEBPyBQ64OdOWohs7zPLm0Le-Chgg> <xmx:OwrcaLGdshYZvnT-jFgf70dqfnIjwevo_Vc36OVkRrF3EXEG5pI2qg> <xmx:OwrcaKWVCH3yiFsxCCMi1Q_fafNtbxiovDfyVV7zc8sjoWWMgqcMJA> <xmx:OwrcaGh2q2VAHlNhTLKICF4BVH5blcyv-YtQ2RcXWt2sDdj90JcZ4g> <xmx:OwrcaFiZvj_ao1h3Y1GHjYJMHg4dLIWpnEMHFtPTndzt5raORV8-jHBL>
Feedback-ID: i2d7042ce:Fastmail
Received: by mailuser.phl.internal (Postfix, from userid 501) id 2B909780272; Tue, 30 Sep 2025 12:50:03 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
MIME-Version: 1.0
X-ThreadId: AFqr69viaJaZ
Date: Tue, 30 Sep 2025 12:49:42 -0400
From: Bron Gondwana <brong@fastmailteam.com>
To: ietf-dkim@ietf.org
Message-Id: <d30d489f-c213-4487-b14e-7e86f6c5b22a@app.fastmail.com>
In-Reply-To: <SigX+bGjI1zoFAjO@highwayman.com>
References: <vUx4j$AgcyyoFAfi@highwayman.com> <e758c1a6-1199-4a3f-8257-3114acae558a@dcrocker.net> <SigX+bGjI1zoFAjO@highwayman.com>
Content-Type: multipart/alternative; boundary="3deeb125149b46489d0251c7a49bb0e9"
Message-ID-Hash: EUZYPQHOHDXVKIUVR6R7P476POCKJ53D
X-Message-ID-Hash: EUZYPQHOHDXVKIUVR6R7P476POCKJ53D
X-MailFrom: brong@fastmailteam.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-ietf-dkim.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Ietf-dkim] Re: Signing headers in DKIM2
List-Id: IETF DKIM List <ietf-dkim.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-dkim/qHr91nqUDgJS7iIB_TXrlPXxlb8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-dkim>
List-Help: <mailto:ietf-dkim-request@ietf.org?subject=help>
List-Owner: <mailto:ietf-dkim-owner@ietf.org>
List-Post: <mailto:ietf-dkim@ietf.org>
List-Subscribe: <mailto:ietf-dkim-join@ietf.org>
List-Unsubscribe: <mailto:ietf-dkim-leave@ietf.org>

On Sat, Sep 20, 2025, at 21:17, Richard Clayton wrote:
> >Worse, whatever list is developed now will be inadequate eventually.
> 
> only if someone invents a new Trace header field, but we could change
> the I-D to specify Received: and Return-Path explicitly (which is sort
> of the case already) rather than implicitly because they are Trace
> header fields.

We must absolutely specify those two explicitly in the document, since code will fail to interoperate unless it agrees exactly on the headers which are excluded.  Explicit is good.

Bron.

--
  Bron Gondwana, CEO, Fastmail Pty Ltd / Fastmail US LLC
  brong@fastmailteam.com

v2.46.0 | Report a Bug | By Email | System Status