[ietf-dkim] My discardable statistics

[Franck Martin]

----- Original Message -----
> From: "John Levine" <johnl at iecc.com>
> To: ietf-dkim at mipassoc.org
> Sent: Thursday, 3 June, 2010 3:44:59 AM
> Subject: [ietf-dkim] My discardable statistics

> I've been saving the DKIM signatures on mail sent to my inbox for
> about the past year, so I did a little analysis on them. There's a
> total of 71,000 signed messages that got to the procmail delivery
> filter, signed by a total of 474 domains. I went through and looked
> up the ADSP records for all of them. I found 51 ADSP records:

> 
> It appears that undp.org really is a branch of the United Nations, and
> their mail management isn't very good. All four of those messages
> came from the UNDP's mail servers, all four of them had return
> addresses that appear to be individual users at undp.org, and all four
> of them are spam or phish, presumably from botted PCs. Two of the
> DKIM signatures verify, two don't, haven't looked hard enough to tell
> why not, but they were broken when they arrived at my MTA. (Look at
> the spamassassin lines, added at SMTP time.)
> 
> They're all in my spam archive, so you can look at them yourself:
> 

Most UNDP country offices around the world are linked via VPN back to New York where their mail is processed, if I recall correctly.