[Users] DKIM test...

[Colin Leroy-Mira]

February 9, 2024 at 9:44 AM, "Slavko" <linux at slavino.sk> wrote:

> Your original signature will fail verification, as CM's ML modifies body 
> of message. The CM's ML signature will probably pass, but that is mostly 
> pointless for DMARC, as its DKIM domain (d=) will not be aligned with 
> From: domain...
> 
> Thus, if your domain has strict DMARC policy (p=quarantine/reject), 
> people can (and often will) have troubles to get your messages.

In fact, if your domain has a strict DMARC policy, correctly-configured mailman lists (like this one) will rewrite the From header (see the correct status on Pierre's email, whose email's From has been rewritten): https://blog.dogan.ch/2016/11/24/making-mailman-dmarc-compatible/

-- 
Colin