Reporter: zwiskle[at]gmail.com
[Submitted to the original trac issue database at 8.59am, Saturday, 14th July 2012]

by chance I found messages like the below in my mailserver.
I assume, the following happens:[[BR]]

• a gmail-user sends a message to the list[[BR]]
• gmail (also a bunch of others) signes the mail using DKMI (1)[[BR]]
• the mail is processed by openstreetmap/ mailman (?)[[BR]]
  -- the mail-headers are manipulated by mailman[[BR]]
• my mail-server (exim4, debian) trys to validate the dkim and interprete it as a "fail"[[BR]]

a potential solution is to tell mailman to remove dkim-headers. ( better no dkim that a false-negative )

see e.g. https://bugs.launchpad.net/mailman/+bug/557493 for a explenation.[[BR]]
--> REMOVE_DKIM_HEADERS = Yes

from my mailservers logfile:[[BR]]
2012-07-14 11:21:35 1SpyXf-00052O-9o DKIM: d=gmail.com s=20120113 c=relaxed/relaxed a=rsa-sha256 [verification failed - signature did not verify (headers probably modified in transit)][[BR]]
2012-07-14 11:21:36 1SpyXf-00052O-9o <= dev-bounces[at]openstreetmap.org H=shenron.openstreetmap.org [89.16.179.150] P=esmtps X=TLS1.0:RSA_AES_256_CBC_SHA1:32 S=4884 id=CANQHZrhhF7GnygbK=yZfh6+C_YdgKT61Cyfdw+TeOecPxHCN9Q[at]mail.gmail.com[[BR]]
2012-07-14 11:21:36 1SpyXf-00052O-9o => [someone who is on that list]
R=local_user T=maildir_home[[BR]]
2012-07-14 11:21:36 1SpyXf-00052O-9o Completed

1] dkim: http://en.wikipedia.org/wiki/Dkim