On Tue, Oct 02, 2012 at 01:59:00PM +0200, Vincent Lefevre wrote:
> If the libmail-dkim-perl package is not installed, spamassassin
> generates a "X-Spam-Status:" header with T_DKIM_INVALID on messages
> having a "DKIM-Signature:" header (whether the signature is valid
> or not).

The DKIM module does attempt to check for the presence and usability of
the Mail::DKIM module. The code is in the _dkim_load_modules routine in
Mail::SpamAssassin::Plugin::DKIM. Will need to spend a little time in
that function to see if I can figure out what's going on.

> A user who configures his mail system (e.g. via procmail) to reject
> messages with T_DKIM_INVALID ends up in losing legitimate mail!

*Any* user who chooses to reject mail based on an invalid DKIM signature
for any reason is making a mistake and will lose legitimate mail:
http://en.wikipedia.org/wiki/Dkim#Content_modification

Ultimately, though I reset this bug's severity to 'important', I really
think this error is entirely cosmetic and the appropriate severity is
'minor'. T_DKIM_INVALID does not, and should not, contribute to a
message's spam score by default.

noah

Attachment: signature.asc
Description: Digital signature

Reply via email to