> > i think i confused noone. you (florian pelz) have invalid DKIM > > signatures (domain pelzflorian.de), while florian pritz has correct > > signatures (domain xinu.at).
It looks like the problem has something to do with the "canonicalization" scheme used (c=... in the dkim-signature) Florian Pritz is using relaxed/simple and it passes, Florian Pelzs messages fail using simple/simple, the same is true for Georg Schlisio, while Lukas Rose (quit early in the thread) passes using relaxed/relaxed. >From this I'd think there's a problem with header or body being slightly modified somewhere on the way (added line breaks or something. I think, we've relaxed/relaxed set, so let's see if it passes) Ralf Mardorf has DomainKey-Signature with c=nofws, seems to be something else and passes. Giovanni Santini uses dkim with relaxed/relaxed plus some X-Google-DKIM-Signature - and this combination fails with "Body has been altered" (as opposed to "Message has been altered" for the other fails) in amavis. hope that is somehow useful, regards, Gabriel
signature.asc
Description: OpenPGP Digital Signature