DKIM signatures from google groups

[Sandro Santilli]

On Thu, Feb 01, 2024 at 09:10:55PM +0100, Javier Jimenez Shaw wrote:

> I attach (only to you) the last email I got from that google group.

There is a single DKIM-Signature from the mailing list (googlegroups.com),
none from the email author (the one in the From).

	DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
					d=googlegroups.com;
					h=list-unsubscribe:list-archive:list-help:list-post:list-id
					  :mailing-list:precedence:reply-to:x-original-authentication-results
					  :x-original-sender:message-id:mime-version:to:from:importance
					  :subject:date:savedfromemail:sender:from:to:cc:subject:date
					  :message-id:reply-to;

The "Return-Path" header is set to googlegroups.com so SPF also passes.

This could be another approach. Leaving the From untouched would
allow the GPG signatures to be properly handled by MUA and stripping
the original author's DKIM signature would prevent finding it broken.

Adding a new DKIM signature could make MTAs happier about accepting
the mail for delivery.

I've to say I find it hard to make use of these signatures from a procmail 
as following all the indirections is pretty complex.

--strk;
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: not available
URL: <http://lists.osgeo.org/pipermail/sac/attachments/20240202/ac26c206/attachment.sig>