#969354 lists.debian.org: Use DKIM with lists.debian.org

Package:
lists.debian.org
Source:
lists.debian.org
Submitter:
Alexander Tait Brotman
Date:
2025-04-03 11:27:01 UTC
Severity:
normal
#969354#5
Date:
2020-08-31 23:30:13 UTC
From:
To:
lists.debian.org should use DKIM as part of taking ownership of its messages.  This allows mailbox providers to be reasonably sure that messages signed
by the systems can be attributed to lists.debian.org, and perhaps assist with domain reputation.  This may also help with forwarding as ARC gains
traction as well.  This should not have any major impact on performance, nor on deliverability.
#969354#10
Date:
2021-09-14 18:55:09 UTC
From:
To:
[This is a repeat of the archived #500966]

I don't think DKIM will help much. But it would really, really help if
lists.debian.org could do ARC so that providers can a) do reputation or
b) just trust that domain to get it right.

Yes, there have been some changes to invalidate DKIM signatures less,
but you cannot control what the incoming DKIM signature encompassed. So
I found a mail recently where there were various headers included that
lists.debian.org modifies by design. ARC solves this problem by just
letting you sign the outgoing emails, regardless of prior DKIM status.

Kind regards
Philipp Kern
#969354#15
Date:
2021-09-14 19:35:54 UTC
From:
To:
 If it wasn't clear, I was suggesting that lists.d.o sign as lists.d.o.   Nothing about DMARC/ARC.  ARC would be great, but DKIM signatures for traffic coming from the listserv would be a good start.  Alignment isn't necessary in this case.
    On Tuesday, September 14, 2021, 02:55:13 PM EDT, Philipp Kern <pkern@debian.org> wrote:

 [This is a repeat of the archived #500966]

I don't think DKIM will help much. But it would really, really help if
lists.debian.org could do ARC so that providers can a) do reputation or
b) just trust that domain to get it right.

Yes, there have been some changes to invalidate DKIM signatures less,
but you cannot control what the incoming DKIM signature encompassed. So
I found a mail recently where there were various headers included that
lists.debian.org modifies by design. ARC solves this problem by just
letting you sign the outgoing emails, regardless of prior DKIM status.

Kind regards
Philipp Kern
#969354#20
Date:
2024-03-17 15:52:28 UTC
From:
To:
I've been trying to subscribe to debian-devel for about a month
through both https://lists.debian.org/debian-deval and direct
subscribe emails to debian-devel-request@lists.debian.org and until
this morning haven't received a confirmation email using either
method.

Today I got confirmation emails but confirmation is failing; I'm
receiving a canned error message.

I've tried confirming by just hitting reply on the confirmation email
and also by creating a new email with "confirm" and the confirmation
number in the subject line.  Both methods are failing consistently.
#969354#25
Date:
2024-03-18 13:43:17 UTC
From:
To:
Since google requires working SPF or DKIM, I recommend setting up either one
for people using gmail accounts.

The advantage of DKIM is that it works in case of someone is forwarding mail
to address hosted on other servers.
#969354#30
Date:
2025-02-08 04:49:15 UTC
From:
To:
Final Notice.

You are among the beneficiaries of 2024/2025 grant for all scam victims and relatives reconfirm your email if active for more details

Thank You.

Regards
Mr. Rowland Cole
( Financial Crimes Enforcement Network)
#969354#35
Date:
2025-04-03 11:19:39 UTC
From:
To:
Matus UHLAR - fantomas <uhlar@fantomas.sk> writes:

+1; this is a similar issue to #1043539.


Sincerely, Byunghee