bug-mailfromd
Re: [Bug-mailfromd] dkim domain not aligned.
Marc <Marc@xxxxxxxxxxxxxxxxx> ha escrit:
> "DKIM domain does not align with RFC5322.From domain (a.com !=
> b.com). Alignment mode: relaxed."
This has nothing to do with DKIM proper, but rather with its
interpretation by DMARC. "Alignment" in this context stands for
so-called "DKIM Identifier Alignment", defined in RFC 7489. In relaxed
mode the Return-Path domain or the domain used in the DKIM signature
(d=) can be a subdomain of the "From" address. In strict mode, the two
must match exactly. For a detailed discussion, refer to
https://datatracker.ietf.org/doc/html/rfc7489#section-3.1.1
Alignment to be used for DKIM checking is defined by the DMARC DNS
record in question (see the "adkim" parameter).
Regards,
Sergey