Fix DKIM config #66

Gonne · 2025-03-25T20:17:43Z

Gonne commented

2025-03-25 20:17:43 +00:00

No description provided.

Gonne added 1 commit 2025-03-25 20:17:43 +00:00

Fix DKIM config 386b2df01f

requested review from Server-Minions

2025-03-25 20:17:49 +00:00

Gonne force-pushed nyarlathotep from 386b2df01f to fce8e7b96e

2025-03-26 06:38:11 +00:00

Compare

Gonne added 1 commit 2025-03-26 06:44:21 +00:00

Update alias-to-sieve script to set Delivered-To headers on our forwarded mails. a9811de025

Fixes #65

Gonne force-pushed nyarlathotep from a9811de025 to 1e19850388

2025-03-26 06:45:14 +00:00

Compare

Gonne force-pushed nyarlathotep from 1e19850388 to 386b2df01f

2025-03-26 06:47:47 +00:00

Compare

Gonne force-pushed nyarlathotep from 386b2df01f to 88d7a40000

2025-03-26 13:16:19 +00:00

Compare

nerf approved these changes 2025-03-26 13:33:02 +00:00

Dismissed

nixos/modules/mail.nix Outdated

					
				@ -241,3 +242,3 @@

				                domain = "${domain}";

				                selector = "rsa-default";

				                headers = ["From" "To" "Cc" "Date" "Subject" "Message-ID" "Organization" "MIME-Version" "Content-Type" "In-Reply-To" "References" "List-Id" "User-Agent" "Thread-Topic" "Thread-Index"]; # default from https://stalw.art/docs/smtp/authentication/dkim/sign#signatures

				                headers = ["From" "To" "Cc" "Date" "Subject" "Message-ID" "Organization" "MIME-Version" "Content-Type" "In-Reply-To" "References" "List-Id" "Thread-Topic" "Thread-Index"]; # default from https://stalw.art/docs/smtp/authentication/dkim/sign#signatures except "User-Agent" which somehow breaks

nerf commented

2025-03-26 13:32:58 +00:00

This is a strange header, it is technically not a mail header but a netnews header, which is a different format
for Internet Messages. See IANA and thus only defined in RFC 5536 3.2.13. So think it should not occur in Mail, but maybe in Messages we have to forward. (For example someone joins a newsgroup with a mathebau address). This Message format comes with it complete own set of Headers (that has some overlap with mail), but which we usually don't care to sign, like the Newsgroups header, or the Injection-Info header.

So if we agree to not care for netnews and generally only sign netnews headers if they are incidentally mail header, we should not sign User-Agent anyway.

This is a strange header, it is technically not a mail header but a netnews header, which is a different format for Internet Messages. See [IANA](https://www.iana.org/assignments/message-headers/message-headers.xhtml) and thus only defined in [RFC 5536 3.2.13](https://www.rfc-editor.org/rfc/rfc5536.html#section-3.2.13). So think it should not occur in Mail, but maybe in Messages we have to forward. (For example someone joins a newsgroup with a mathebau address). This Message format comes with it complete own set of Headers (that has some overlap with mail), but which we usually don't care to sign, like the `Newsgroups` header, or the `Injection-Info` header. So if we agree to not care for netnews and generally only sign netnews headers if they are incidentally mail header, we should not sign `User-Agent` anyway.