[dkim-ops] [Dkim-contact] When i switched to "g=bh", Gmail said (...)

Byung-Hee HWANG bh at izb.knu.ac.kr
Tue Nov 4 16:40:53 PST 2008

Hash: SHA1

Here is the full header failed in DKIM verifying:


FYI; i used/use Jason's DKIMProxy for signing DKIM signature ;;

Vijay Eranti (✌ విజయ్ ఈరంటి) wrote:
> can you send me a sample dkim signature that failed ?
> here is what the spec says
> g=  Granularity of the key (plain-text; OPTIONAL, default is "*").
>        This value MUST match the Local-part of the "i=" tag of the DKIM-
>        Signature header field (or its default value of the empty string
>        if "i=" is not specified). An email with a signing address that does not
>        match the value of this tag constitutes a failed verification.
>        The intent of this tag is to constrain which signing address can
>        legitimately use this selector, for example, when delegating a
>        key to a third party that should only be used for special
>        purposes. 
> I am interested in what you specified in your i= in the dkim signature.
> On Mon, Nov 3, 2008 at 8:27 PM, Byung-Hee HWANG <bh at izb.knu.ac.kr
> <mailto:bh at izb.knu.ac.kr>> wrote:
> When i was used with "g=*", Gmail said as follow:
>        dkim=pass (test mode) header.i=@izb.knu.ac.kr
> <http://izb.knu.ac.kr>
> When i switched to "g=bh" from "g=*", Gmail said as follow:
>        dkim=neutral (no key) header.i=@izb.knu.ac.kr
> <http://izb.knu.ac.kr>
> Below is my current TXT record for DKIM:
> bh at chrys:~> dig +short dj._domainkey.izb.knu.ac.kr
> <http://domainkey.izb.knu.ac.kr>. TXT
> "v=DKIM1; k=rsa; g=bh; s=email; t=y; p=...snip...;"
> bh at chrys:~>
> With same key("g=bh"), dkim-test at testing.dkim.org
> <mailto:dkim-test at testing.dkim.org>'s result was:
>        dkim=pass, header.i=bh at izb.knu.ac.kr <mailto:bh at izb.knu.ac.kr>
> Am i wrong? Or Gmail's missed point about "g" tag?
> byunghee

- --~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Dkim-contact" group.
To post to this group, send email to dkim-contact at google.com
<mailto:dkim-contact at google.com>
To unsubscribe from this group, send email to
dkim-contact+unsubscribe at google.com
<mailto:dkim-contact%2Bunsubscribe at google.com>
For more options, visit this group at
- -~----------~----~----~----~------~----~------~--~---

Version: GnuPG v1.4.0 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


More information about the dkim-ops mailing list