#1051941 replay cache accepts signed mail before it goes through to mailing list

#1051941#5
Date:
2023-09-14 15:34:48 UTC
From:
To:
Hi,

when sending a malformed mail to a mailing list requiring a valid PGP signature,
the replay cache will add signature to the cache, but then get rejected in a
later step.

This results in any later attempts to send the signed mail to silently fail
(#1050906), even though it would otherwise have a valid signature and be
correctly formed.

It would be nice if the signature verification check would be last in the milter
list to mitigate this issue.

Regards,
Lee

#1051941#10
Date:
2025-02-08 04:49:23 UTC
From:
To:
Final Notice.

You are among the beneficiaries of 2024/2025 grant for all scam victims and relatives reconfirm your email if active for more details

Thank You.

Regards
Mr. Rowland Cole
( Financial Crimes Enforcement Network)