bug-mailfromd

Search for: Advanced

Re: [Bug-mailfromd] dkim domain not aligned.

> > "DKIM domain does not align with RFC5322.From domain (a.com !=
> > b.com). Alignment mode: relaxed."
> 
> This has nothing to do with DKIM proper, but rather with its
> interpretation by DMARC.  "Alignment" in this context stands for
> so-called "DKIM Identifier Alignment", defined in RFC 7489.  In relaxed
> mode the Return-Path domain or the domain used in the DKIM signature
> (d=) can be a subdomain of the "From" address.  In strict mode, the two
> must match exactly.  For a detailed discussion, refer to

So there is no option to have the signing done by an external domain like a.com sign for b.com? 
(even if your spf shows that you allow this domain to send your mail)

> https://datatracker.ietf.org/doc/html/rfc7489#section-3.1.1
> 
> Alignment to be used for DKIM checking is defined by the DMARC DNS
> record in question (see the "adkim" parameter).

So these signing domains are only checked if I have added a _dmarc.b.com record? If I have added this then a default value will cause this check to be done?