bug-mailfromd


Search for: Advanced

Re: [Bug-mailfromd] dkim domain not aligned.


Marc <Marc@xxxxxxxxxxxxxxxxx> ha escrit:

> "DKIM domain does not align with RFC5322.From domain (a.com !=
> b.com). Alignment mode: relaxed." 

This has nothing to do with DKIM proper, but rather with its
interpretation by DMARC.  "Alignment" in this context stands for
so-called "DKIM Identifier Alignment", defined in RFC 7489.  In relaxed
mode the Return-Path domain or the domain used in the DKIM signature
(d=) can be a subdomain of the "From" address.  In strict mode, the two
must match exactly.  For a detailed discussion, refer to

https://datatracker.ietf.org/doc/html/rfc7489#section-3.1.1

Alignment to be used for DKIM checking is defined by the DMARC DNS
record in question (see the "adkim" parameter).

Regards,
Sergey