On 2023-02-20 19:03, Stephen J. Turnbull wrote:
Jan Eden via Mailman-users writes:
To distribute messages with valid DKIM signatures, I set
remove_dkim_headers: yes
in /etc/mailman3/mailman.cf
That should be "mailman.cfg" for a standard installation, and it may not be in "/etc/mailman3" in a shared hosting situation.
Do you have evidence that removing DKIM headers helps you get mail delivered? (Not adding your own, IMO you should do that regardless of whether you strip existing ones, but removing originals.) The DKIM spec says that you shouldn't, and that consumers should treat invalid signatures no differently from missing signatures. I haven't run into a "public" host that treats an invalid signature as a problem in quite a while.
Right – removing the invalid DKIM signature is just a matter of taste. I tested message distribution with and without signature removal, and two major mail providers did not handle the messages differently.
- Jan