Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

ADSP is an entry in DNS that works allows a domain owner to assert that all email must be signed with DKIM. (similar to the -all and ~all in SPF/SenderID). Messages that fail ADSP policy may be rejected.

Apparently DKIM has a ton of issues with mailing lists.

  • What specific mailinglist software has issues with DKIM and therefore ADSP?

  • What else has an issue with DKIM and should make one reconsider deploying ADSP?

share|improve this question
add comment

1 Answer 1

Firstly, ADSP is simply the mechanism for defining a policy. Specifying dkim=unknown is equivalent to not specifying an ADSP policy. I'm assuming that you're specifically referring to the all and discardable policies here.

The problem with mailing lists occur when the message body or any signed headers are modified. This commonly occurs when adding a footer with list information, which is fairly common behaviour by all mailing list software. I think that pretty much all mailing list software will break DKIM signatures.

Unfortunately there is no consensus yet on how to handle DKIM with remailers. There is a wiki page discussing DKIM in Mailman which discusses the possible solutions. At this stage I would certainly not use dkim=discardable if messages are sent to mailing lists, and would be wary of dkim=all.

share|improve this answer
    
I just discovered DMARC. Would that address or help identify concerns? –  makerofthings7 Jun 17 '12 at 22:28
    
@makerofthings7 Interesting, I haven't heard of DMARC before. It doesn't address mailing lists though -- they're mentioned in the FAQ, but the approaches are the same as in that Mailman wiki page. –  mgorven Jun 17 '12 at 22:56
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.