turning on DKIM verification for the email lists
jralls at ceridwen.us
Fri Dec 6 11:51:44 EST 2013
On Dec 6, 2013, at 7:32 AM, Derek Atkins <warlord at MIT.EDU> wrote:
> Hey, all,
> I just wanted to let people know that I'm considering turning up the
> DKIM validation knob on incoming mail to the gnucash server. In
> particular I plan to have the mail server discard mail that fails DKIM
> signature validation, and I'm debating turning on ADSPDiscard, although
> if I do this I probably need to get it to ignore local mail.
> This is after a conversion I had yesterday with an admin at apple.com
> based on a mailman bounce to a forged address that got sent up to
> Please let me know your thoughts.
My understanding of that is that it will result only in dropping mail which lacks a DKIM signature but the supposed source domain's DNS record says that it should be signed and that unsigned mail should be discarded. Do you really see that much traffic meeting those conditions?
More information about the gnucash-devel