Mailing List Archive

D?a 23. októbra 2023 12:28:50 UTC používate? Markus Reschke via Exim-users <exim-users@lists.exim.org> napísal:

>I'm also looking into optimizing my DKIM configuration, especially which headers to sign.

I use this macro:

DKIM_SIGN_HEADERS = +From:+Reply-To:+Sender:+Subject:+To:+Cc:+Date:+MIME-Version\
${if def:h_Message-Id: {:+Message-Id}{}}\
${if def:h_Content-Description: {:+Content-Description}{}}\
${if def:h_Content-Id: {:+Content-Id}{}}\
${if def:h_Content-Type: {:+Content-Type}{}}\
${if def:h_Content-Type-Encoding: {:+Content-Type-Encoding}{}}\
${if def:h_In-Reply-To: {:+In-Reply-To}{}}\
${if def:h_References: {:+References}{}}\
${if def:h_Openpgp: {:+Openpgp}{}}\
${if def:h_Autocrypt: {:+Autocrypt}{}}\
:=Resent-To:=Resent-Cc:=Resent-Date:=Resent-From:=Resent-Sender:=Resent-Message-Id\
:=List-Archive:=List-Id:=List-Help:=List-Owner:=List-Unsubscribe:=List-Subscribe:=List-Post

In other words, i unconditionaly oversign some, then oversign if presented
and at end sign if presented. I initially apply that from rspamd signing,
search its docs for details.

regards


--
Slavko
https://www.slavino.sk/

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/