Mirrors/chatmail-core
1
0
Fork 0
mirror of https://github.com/chatmail/core.git synced 2026-04-18 22:16:30 +03:00
Code Issues Packages Projects Releases Wiki Activity

Check DKIM Authentication-Results (#3583)

Browse Source 
Fix #3507

Note that this is not intended for a release at this point! We first have to test whether it runs stable enough. If we want to make a release while we are not confident enough in authres-checking, then we have to disable it.

BTW, most of the 3000 new lines are in `test_data/messages/dkimchecks...`, not the actual code

da3a4b94 adds the results to the Message info. It currently does this by adding them to `hop_info`. Maybe we should rename `hop_info` to `extra_info` or something; this has the disadvantage that we can't rename the sql column name though.

Follow-ups for this could be:
- In `update_authservid_candidates()`: Implement the rest of the algorithm @hpk42 and me thought about. What's missing is remembering how sure we are that these are the right authserv-ids. Esp., when receiving a message sent from another account at the same domain, we can be quite sure that the authserv-ids in there are the ones of our email server. This will make authres-checking work with buzon.uy, disroot.org, yandex.ru, mailo.com, and riseup.net.
- Think about how we present this to the user - e.g. currently the only change is that we don't accept key changes, which will mean that the small lock on the message is not shown.
- And it will mean that we can fully enable AEAP, after revisiting the security implications of this, and assuming everyone (esp. @link2xt who pointed out the problems in the first place) feels comfortable with it.
This commit is contained in:
Hocuri
2022-10-28 12:15:37 +02:00
committed by GitHub
parent d8bc3769a5
commit b1c6c40fa7
326 changed files with 3304 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@aol.com Normal file
View File

@@ -0,0 +1,39 @@
ARC-Authentication-Results: i=1; mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=sonic314-20.consmr.mail.ir2.yahoo.com
policy.ptr=sonic314-20.consmr.mail.ir2.yahoo.com;
bimi=none (No BIMI records found);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=aol.com header.i=@aol.com
header.b=Y+EgdIPN header.a=rsa-sha256 header.s=a2048 x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p
header.from=aol.com;
iprev=pass smtp.remote-ip=77.238.177.146
(sonic314-20.consmr.mail.ir2.yahoo.com);
spf=pass smtp.mailfrom=alice@aol.com
smtp.helo=sonic314-20.consmr.mail.ir2.yahoo.com
Authentication-Results: mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=sonic314-20.consmr.mail.ir2.yahoo.com
policy.ptr=sonic314-20.consmr.mail.ir2.yahoo.com
Authentication-Results: mx1.messagingengine.com;
bimi=none (No BIMI records found)
Authentication-Results: mx1.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx1.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=aol.com header.i=@aol.com
header.b=Y+EgdIPN header.a=rsa-sha256 header.s=a2048 x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p
header.from=aol.com;
iprev=pass smtp.remote-ip=77.238.177.146
(sonic314-20.consmr.mail.ir2.yahoo.com);
spf=pass smtp.mailfrom=alice@aol.com
smtp.helo=sonic314-20.consmr.mail.ir2.yahoo.com
From: <alice@aol.com>
To: <alice@fastmail.com>

33
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@buzon.uy Normal file
View File

@@ -0,0 +1,33 @@
ARC-Authentication-Results: i=1; mx4.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=mail.buzon.uy policy.ptr=mail.buzon.uy;
bimi=none (No BIMI records found);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=buzon.uy header.i=@buzon.uy
header.b=ibjKHetx header.a=rsa-sha256 header.s=2019 x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p
header.from=buzon.uy;
iprev=pass smtp.remote-ip=185.101.93.79 (mail.buzon.uy);
spf=pass smtp.mailfrom=alice@buzon.uy smtp.helo=mail.buzon.uy
Authentication-Results: mx4.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=mail.buzon.uy policy.ptr=mail.buzon.uy
Authentication-Results: mx4.messagingengine.com;
bimi=none (No BIMI records found)
Authentication-Results: mx4.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx4.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=buzon.uy header.i=@buzon.uy
header.b=ibjKHetx header.a=rsa-sha256 header.s=2019 x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p
header.from=buzon.uy;
iprev=pass smtp.remote-ip=185.101.93.79 (mail.buzon.uy);
spf=pass smtp.mailfrom=alice@buzon.uy smtp.helo=mail.buzon.uy
From: <alice@buzon.uy>
To: <alice@fastmail.com>

38
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@delta.blinzeln.de Normal file
View File

@@ -0,0 +1,38 @@
ARC-Authentication-Results: i=1; mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=nx184.node01.secure-mailgate.com
policy.ptr=nx184.node01.secure-mailgate.com;
bimi=skipped (DMARC did not pass);
arc=none (no signatures found);
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=delta.blinzeln.de;
iprev=pass smtp.remote-ip=89.22.108.184
(nx184.node01.secure-mailgate.com);
spf=none smtp.mailfrom=alice@delta.blinzeln.de
smtp.helo=nx184.node01.secure-mailgate.com
Authentication-Results: mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=nx184.node01.secure-mailgate.com
policy.ptr=nx184.node01.secure-mailgate.com
Authentication-Results: mx1.messagingengine.com;
bimi=skipped (DMARC did not pass)
Authentication-Results: mx1.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx1.messagingengine.com;
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=delta.blinzeln.de;
iprev=pass smtp.remote-ip=89.22.108.184
(nx184.node01.secure-mailgate.com);
spf=none smtp.mailfrom=alice@delta.blinzeln.de
smtp.helo=nx184.node01.secure-mailgate.com
From: <alice@delta.blinzeln.de>
To: <alice@fastmail.com>
Authentication-Results: secure-mailgate.com; auth=pass smtp.auth=91.203.111.88@webbox222.server-home.org

35
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@disroot.org Normal file
View File

@@ -0,0 +1,35 @@
ARC-Authentication-Results: i=1; mx5.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=knopi.disroot.org policy.ptr=knopi.disroot.org;
bimi=none (No BIMI records found);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=disroot.org
header.i=@disroot.org header.b=OQYRknPj header.a=rsa-sha256
header.s=mail x-bits=2048;
dmarc=pass policy.published-domain-policy=quarantine
policy.applied-disposition=none policy.evaluated-disposition=none
(p=quarantine,d=none,d.eval=none) policy.policy-from=p
header.from=disroot.org;
iprev=pass smtp.remote-ip=178.21.23.139 (knopi.disroot.org);
spf=pass smtp.mailfrom=alice@disroot.org smtp.helo=knopi.disroot.org
Authentication-Results: mx5.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=knopi.disroot.org policy.ptr=knopi.disroot.org
Authentication-Results: mx5.messagingengine.com;
bimi=none (No BIMI records found)
Authentication-Results: mx5.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx5.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=disroot.org
header.i=@disroot.org header.b=OQYRknPj header.a=rsa-sha256
header.s=mail x-bits=2048;
dmarc=pass policy.published-domain-policy=quarantine
policy.applied-disposition=none policy.evaluated-disposition=none
(p=quarantine,d=none,d.eval=none) policy.policy-from=p
header.from=disroot.org;
iprev=pass smtp.remote-ip=178.21.23.139 (knopi.disroot.org);
spf=pass smtp.mailfrom=alice@disroot.org smtp.helo=knopi.disroot.org
From: <alice@disroot.org>
To: <alice@fastmail.com>

41
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@gmail.com Normal file
View File

@@ -0,0 +1,41 @@
ARC-Authentication-Results: i=1; mx6.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=mail-wm1-f67.google.com
policy.ptr=mail-wm1-f67.google.com;
bimi=skipped (DMARC Policy is not at enforcement);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=gmail.com
header.i=@gmail.com header.b=hr44hXYS header.a=rsa-sha256
header.s=20210112 x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.published-subdomain-policy=quarantine
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p
header.from=gmail.com;
iprev=pass smtp.remote-ip=209.85.128.67 (mail-wm1-f67.google.com);
spf=pass smtp.mailfrom=alice@gmail.com
smtp.helo=mail-wm1-f67.google.com
Authentication-Results: mx6.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=mail-wm1-f67.google.com
policy.ptr=mail-wm1-f67.google.com
Authentication-Results: mx6.messagingengine.com;
bimi=skipped (DMARC Policy is not at enforcement)
Authentication-Results: mx6.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx6.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=gmail.com
header.i=@gmail.com header.b=hr44hXYS header.a=rsa-sha256
header.s=20210112 x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.published-subdomain-policy=quarantine
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p
header.from=gmail.com;
iprev=pass smtp.remote-ip=209.85.128.67 (mail-wm1-f67.google.com);
spf=pass smtp.mailfrom=alice@gmail.com
smtp.helo=mail-wm1-f67.google.com
From: <alice@gmail.com>
To: <alice@fastmail.com>

45
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@hotmail.com Normal file
View File

@@ -0,0 +1,45 @@
ARC-Authentication-Results: i=2; mx2.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=fail smtp.helo=EUR05-DB8-obe.outbound.protection.outlook.com
policy.ptr=mail-db8eur05olkn2101.outbound.protection.outlook.com;
bimi=skipped (DMARC Policy is not at enforcement);
arc=pass (as.1.microsoft.com=pass, ams.1.microsoft.com=pass)
smtp.remote-ip=40.92.89.101;
dkim=pass (2048-bit rsa key sha256) header.d=hotmail.com
header.i=@hotmail.com header.b=FbLQTic7 header.a=rsa-sha256
header.s=selector1 x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=hotmail.com;
iprev=pass smtp.remote-ip=40.92.89.101
(mail-db8eur05olkn2101.outbound.protection.outlook.com);
spf=pass smtp.mailfrom=alice@hotmail.com
smtp.helo=EUR05-DB8-obe.outbound.protection.outlook.com
Authentication-Results: mx2.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=fail smtp.helo=EUR05-DB8-obe.outbound.protection.outlook.com
policy.ptr=mail-db8eur05olkn2101.outbound.protection.outlook.com
Authentication-Results: mx2.messagingengine.com;
bimi=skipped (DMARC Policy is not at enforcement)
Authentication-Results: mx2.messagingengine.com;
arc=pass (as.1.microsoft.com=pass, ams.1.microsoft.com=pass)
smtp.remote-ip=40.92.89.101
Authentication-Results: mx2.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=hotmail.com
header.i=@hotmail.com header.b=FbLQTic7 header.a=rsa-sha256
header.s=selector1 x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=hotmail.com;
iprev=pass smtp.remote-ip=40.92.89.101
(mail-db8eur05olkn2101.outbound.protection.outlook.com);
spf=pass smtp.mailfrom=alice@hotmail.com
smtp.helo=EUR05-DB8-obe.outbound.protection.outlook.com
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
From: <alice@hotmail.com>
To: <alice@fastmail.com>

41
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@icloud.com Normal file
View File

@@ -0,0 +1,41 @@
ARC-Authentication-Results: i=1; mx4.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=qs51p00im-qukt01072701.me.com
policy.ptr=qs51p00im-qukt01072701.me.com;
bimi=declined (Domain declined to participate);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=icloud.com
header.i=@icloud.com header.b=QwCPOZZR header.a=rsa-sha256
header.s=1a1hai x-bits=2048;
dmarc=pass policy.published-domain-policy=quarantine
policy.published-subdomain-policy=quarantine
policy.applied-disposition=none policy.evaluated-disposition=none
(p=quarantine,sp=quarantine,d=none,d.eval=none) policy.policy-from=p
header.from=icloud.com;
iprev=pass smtp.remote-ip=17.57.155.16 (qs51p00im-qukt01072701.me.com);
spf=pass smtp.mailfrom=alice@icloud.com
smtp.helo=qs51p00im-qukt01072701.me.com
Authentication-Results: mx4.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=qs51p00im-qukt01072701.me.com
policy.ptr=qs51p00im-qukt01072701.me.com
Authentication-Results: mx4.messagingengine.com;
bimi=declined (Domain declined to participate)
Authentication-Results: mx4.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx4.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=icloud.com
header.i=@icloud.com header.b=QwCPOZZR header.a=rsa-sha256
header.s=1a1hai x-bits=2048;
dmarc=pass policy.published-domain-policy=quarantine
policy.published-subdomain-policy=quarantine
policy.applied-disposition=none policy.evaluated-disposition=none
(p=quarantine,sp=quarantine,d=none,d.eval=none) policy.policy-from=p
header.from=icloud.com;
iprev=pass smtp.remote-ip=17.57.155.16 (qs51p00im-qukt01072701.me.com);
spf=pass smtp.mailfrom=alice@icloud.com
smtp.helo=qs51p00im-qukt01072701.me.com
From: <alice@icloud.com>
To: <alice@fastmail.com>

35
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@ik.me Normal file
View File

@@ -0,0 +1,35 @@
ARC-Authentication-Results: i=1; mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=smtp-190a.mail.infomaniak.ch
policy.ptr=smtp-190a.mail.infomaniak.ch;
bimi=none (No BIMI records found);
arc=none (no signatures found);
dkim=pass (1024-bit rsa key sha256) header.d=ik.me header.i=@ik.me
header.b=jBTsueYX header.a=rsa-sha256 header.s=20200325 x-bits=1024;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p header.from=ik.me;
iprev=pass smtp.remote-ip=185.125.25.10 (smtp-190a.mail.infomaniak.ch);
spf=pass smtp.mailfrom=alice@ik.me
smtp.helo=smtp-190a.mail.infomaniak.ch
Authentication-Results: mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=smtp-190a.mail.infomaniak.ch
policy.ptr=smtp-190a.mail.infomaniak.ch
Authentication-Results: mx3.messagingengine.com;
bimi=none (No BIMI records found)
Authentication-Results: mx3.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx3.messagingengine.com;
dkim=pass (1024-bit rsa key sha256) header.d=ik.me header.i=@ik.me
header.b=jBTsueYX header.a=rsa-sha256 header.s=20200325 x-bits=1024;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p header.from=ik.me;
iprev=pass smtp.remote-ip=185.125.25.10 (smtp-190a.mail.infomaniak.ch);
spf=pass smtp.mailfrom=alice@ik.me
smtp.helo=smtp-190a.mail.infomaniak.ch
From: <alice@ik.me>
To: <alice@fastmail.com>

33
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@mail.de Normal file
View File

@@ -0,0 +1,33 @@
ARC-Authentication-Results: i=1; mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=shout01.mail.de policy.ptr=shout01.mail.de;
bimi=skipped (DMARC Policy is not at enforcement);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=mail.de header.i=@mail.de
header.b=yhwPh9JD header.a=rsa-sha256 header.s=mailde202009
x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=mail.de;
iprev=pass smtp.remote-ip=62.201.172.24 (shout01.mail.de);
spf=pass smtp.mailfrom=alice@mail.de smtp.helo=shout01.mail.de
Authentication-Results: mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=shout01.mail.de policy.ptr=shout01.mail.de
Authentication-Results: mx3.messagingengine.com;
bimi=skipped (DMARC Policy is not at enforcement)
Authentication-Results: mx3.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx3.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=mail.de header.i=@mail.de
header.b=yhwPh9JD header.a=rsa-sha256 header.s=mailde202009
x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p header.from=mail.de;
iprev=pass smtp.remote-ip=62.201.172.24 (shout01.mail.de);
spf=pass smtp.mailfrom=alice@mail.de smtp.helo=shout01.mail.de
From: <alice@mail.de>
To: <alice@fastmail.com>

34
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@mail.ru Normal file
View File

@@ -0,0 +1,34 @@
ARC-Authentication-Results: i=1; mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=smtpng1.i.mail.ru policy.ptr=smtpng1.i.mail.ru;
bimi=none (No BIMI records found);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=mail.ru header.i=@mail.ru
header.b=0EDw+VrK header.a=rsa-sha256 header.s=mail4 x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p
header.from=mail.ru;
iprev=pass smtp.remote-ip=94.100.181.251 (smtpng1.i.mail.ru);
spf=pass smtp.mailfrom=alice@mail.ru smtp.helo=smtpng1.i.mail.ru
Authentication-Results: mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=smtpng1.i.mail.ru policy.ptr=smtpng1.i.mail.ru
Authentication-Results: mx3.messagingengine.com;
bimi=none (No BIMI records found)
Authentication-Results: mx3.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx3.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=mail.ru header.i=@mail.ru
header.b=0EDw+VrK header.a=rsa-sha256 header.s=mail4 x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p
header.from=mail.ru;
iprev=pass smtp.remote-ip=94.100.181.251 (smtpng1.i.mail.ru);
spf=pass smtp.mailfrom=alice@mail.ru smtp.helo=smtpng1.i.mail.ru
From: <alice@mail.ru>
To: <alice@fastmail.com>
Authentication-Results: smtpng1.m.smailru.net; auth=pass smtp.auth=alice@mail.ru smtp.mailfrom=alice@mail.ru

35
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@mailo.com Normal file
View File

@@ -0,0 +1,35 @@
ARC-Authentication-Results: i=1; mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=msg-1.mailo.com policy.ptr=msg-1.mailo.com;
bimi=skipped (DMARC Policy is not at enforcement);
arc=none (no signatures found);
dkim=pass (1024-bit rsa key sha256) header.d=mailo.com
header.i=@mailo.com header.b=KpmcEAgT header.a=rsa-sha256
header.s=mailo x-bits=1024;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=mailo.com;
iprev=pass smtp.remote-ip=213.182.54.11 (msg-1.mailo.com);
spf=pass smtp.mailfrom=alice@mailo.com smtp.helo=msg-1.mailo.com
Authentication-Results: mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=msg-1.mailo.com policy.ptr=msg-1.mailo.com
Authentication-Results: mx1.messagingengine.com;
bimi=skipped (DMARC Policy is not at enforcement)
Authentication-Results: mx1.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx1.messagingengine.com;
dkim=pass (1024-bit rsa key sha256) header.d=mailo.com
header.i=@mailo.com header.b=KpmcEAgT header.a=rsa-sha256
header.s=mailo x-bits=1024;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=mailo.com;
iprev=pass smtp.remote-ip=213.182.54.11 (msg-1.mailo.com);
spf=pass smtp.mailfrom=alice@mailo.com smtp.helo=msg-1.mailo.com
From: <alice@mailo.com>
To: <alice@fastmail.com>

47
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@outlook.com Normal file
View File

@@ -0,0 +1,47 @@
ARC-Authentication-Results: i=2; mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=fail smtp.helo=EUR01-VE1-obe.outbound.protection.outlook.com
policy.ptr=mail-oln040092066024.outbound.protection.outlook.com;
bimi=skipped (DMARC Policy is not at enforcement);
arc=pass (as.1.microsoft.com=pass, ams.1.microsoft.com=pass)
smtp.remote-ip=40.92.66.24;
dkim=pass (2048-bit rsa key sha256) header.d=outlook.com
header.i=@outlook.com header.b=Qx1vn7vt header.a=rsa-sha256
header.s=selector1 x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.published-subdomain-policy=quarantine
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p
header.from=outlook.com;
iprev=pass smtp.remote-ip=40.92.66.24
(mail-oln040092066024.outbound.protection.outlook.com);
spf=pass smtp.mailfrom=alice@outlook.com
smtp.helo=EUR01-VE1-obe.outbound.protection.outlook.com
Authentication-Results: mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=fail smtp.helo=EUR01-VE1-obe.outbound.protection.outlook.com
policy.ptr=mail-oln040092066024.outbound.protection.outlook.com
Authentication-Results: mx3.messagingengine.com;
bimi=skipped (DMARC Policy is not at enforcement)
Authentication-Results: mx3.messagingengine.com;
arc=pass (as.1.microsoft.com=pass, ams.1.microsoft.com=pass)
smtp.remote-ip=40.92.66.24
Authentication-Results: mx3.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=outlook.com
header.i=@outlook.com header.b=Qx1vn7vt header.a=rsa-sha256
header.s=selector1 x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.published-subdomain-policy=quarantine
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,sp=quarantine,d=none,d.eval=none) policy.policy-from=p
header.from=outlook.com;
iprev=pass smtp.remote-ip=40.92.66.24
(mail-oln040092066024.outbound.protection.outlook.com);
spf=pass smtp.mailfrom=alice@outlook.com
smtp.helo=EUR01-VE1-obe.outbound.protection.outlook.com
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
From: <alice@outlook.com>
To: <alice@fastmail.com>

37
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@posteo.de Normal file
View File

@@ -0,0 +1,37 @@
ARC-Authentication-Results: i=1; mx4.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=mout01.posteo.de policy.ptr=mout01.posteo.de;
bimi=skipped (DMARC Policy is not at enforcement);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=posteo.de
header.i=@posteo.de header.b=EW5hKmBT header.a=rsa-sha256
header.s=2017 x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=posteo.de;
iprev=pass smtp.remote-ip=185.67.36.65 (mout01.posteo.de);
spf=pass smtp.mailfrom=alice@posteo.de
smtp.helo=mout01.posteo.de
Authentication-Results: mx4.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=mout01.posteo.de policy.ptr=mout01.posteo.de
Authentication-Results: mx4.messagingengine.com;
bimi=skipped (DMARC Policy is not at enforcement)
Authentication-Results: mx4.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx4.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=posteo.de
header.i=@posteo.de header.b=EW5hKmBT header.a=rsa-sha256
header.s=2017 x-bits=2048;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=posteo.de;
iprev=pass smtp.remote-ip=185.67.36.65 (mout01.posteo.de);
spf=pass smtp.mailfrom=alice@posteo.de
smtp.helo=mout01.posteo.de
From: <alice@posteo.de>
To: <alice@fastmail.com>

35
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@riseup.net Normal file
View File

@@ -0,0 +1,35 @@
ARC-Authentication-Results: i=1; mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=mx0.riseup.net policy.ptr=mx0.riseup.net;
bimi=skipped (DMARC Policy is not at enforcement);
arc=none (no signatures found);
dkim=pass (1024-bit rsa key sha256) header.d=riseup.net
header.i=@riseup.net header.b=M0RI7cx7 header.a=rsa-sha256
header.s=squak x-bits=1024;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=riseup.net;
iprev=pass smtp.remote-ip=198.252.153.6 (mx0.riseup.net);
spf=pass smtp.mailfrom=alice@riseup.net smtp.helo=mx0.riseup.net
Authentication-Results: mx3.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=mx0.riseup.net policy.ptr=mx0.riseup.net
Authentication-Results: mx3.messagingengine.com;
bimi=skipped (DMARC Policy is not at enforcement)
Authentication-Results: mx3.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx3.messagingengine.com;
dkim=pass (1024-bit rsa key sha256) header.d=riseup.net
header.i=@riseup.net header.b=M0RI7cx7 header.a=rsa-sha256
header.s=squak x-bits=1024;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=riseup.net;
iprev=pass smtp.remote-ip=198.252.153.6 (mx0.riseup.net);
spf=pass smtp.mailfrom=alice@riseup.net smtp.helo=mx0.riseup.net
From: <alice@riseup.net>
To: <alice@fastmail.com>

41
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@yahoo.com Normal file
View File

@@ -0,0 +1,41 @@
ARC-Authentication-Results: i=1; mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=sonic310-11.consmr.mail.ir2.yahoo.com
policy.ptr=sonic310-11.consmr.mail.ir2.yahoo.com;
bimi=none (No BIMI records found);
arc=none (no signatures found);
dkim=pass (2048-bit rsa key sha256) header.d=yahoo.com
header.i=@yahoo.com header.b=cynWU+nU header.a=rsa-sha256
header.s=s2048 x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p
header.from=yahoo.com;
iprev=pass smtp.remote-ip=77.238.177.32
(sonic310-11.consmr.mail.ir2.yahoo.com);
spf=pass smtp.mailfrom=alice@yahoo.com
smtp.helo=sonic310-11.consmr.mail.ir2.yahoo.com
Authentication-Results: mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=sonic310-11.consmr.mail.ir2.yahoo.com
policy.ptr=sonic310-11.consmr.mail.ir2.yahoo.com
Authentication-Results: mx1.messagingengine.com;
bimi=none (No BIMI records found)
Authentication-Results: mx1.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx1.messagingengine.com;
dkim=pass (2048-bit rsa key sha256) header.d=yahoo.com
header.i=@yahoo.com header.b=cynWU+nU header.a=rsa-sha256
header.s=s2048 x-bits=2048;
dmarc=pass policy.published-domain-policy=reject
policy.applied-disposition=none policy.evaluated-disposition=none
(p=reject,d=none,d.eval=none) policy.policy-from=p
header.from=yahoo.com;
iprev=pass smtp.remote-ip=77.238.177.32
(sonic310-11.consmr.mail.ir2.yahoo.com);
spf=pass smtp.mailfrom=alice@yahoo.com
smtp.helo=sonic310-11.consmr.mail.ir2.yahoo.com
From: <alice@yahoo.com>
To: <alice@fastmail.com>

40
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/alice@yandex.ru Normal file
View File

@@ -0,0 +1,40 @@
ARC-Authentication-Results: i=1; mx4.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=forward501o.mail.yandex.net
policy.ptr=forward501o.mail.yandex.net;
bimi=skipped (DMARC Policy is not at enforcement);
arc=none (no signatures found);
dkim=pass (1024-bit rsa key sha256) header.d=yandex.ru
header.i=@yandex.ru header.b=mZiIROQD header.a=rsa-sha256
header.s=mail x-bits=1024;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=yandex.ru;
iprev=pass smtp.remote-ip=37.140.190.203 (forward501o.mail.yandex.net);
spf=pass smtp.mailfrom=alice@yandex.ru
smtp.helo=forward501o.mail.yandex.net
Authentication-Results: mx4.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=forward501o.mail.yandex.net
policy.ptr=forward501o.mail.yandex.net
Authentication-Results: mx4.messagingengine.com;
bimi=skipped (DMARC Policy is not at enforcement)
Authentication-Results: mx4.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx4.messagingengine.com;
dkim=pass (1024-bit rsa key sha256) header.d=yandex.ru
header.i=@yandex.ru header.b=mZiIROQD header.a=rsa-sha256
header.s=mail x-bits=1024;
dmarc=pass policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=yandex.ru;
iprev=pass smtp.remote-ip=37.140.190.203 (forward501o.mail.yandex.net);
spf=pass smtp.mailfrom=alice@yandex.ru
smtp.helo=forward501o.mail.yandex.net
Authentication-Results: iva4-143b1447cf50.qloud-c.yandex.net; dkim=pass header.i=@yandex.ru
From: <alice@yandex.ru>
To: <alice@fastmail.com>

22
test-data/message/dkimchecks-2022-09-28/alice@fastmail.com/forged-authres-added@example.com Normal file
View File

@@ -0,0 +1,22 @@
Authentication-Results: mx1.messagingengine.com;
x-csa=none;
x-me-sender=none;
x-ptr=pass smtp.helo=nx184.node01.secure-mailgate.com
policy.ptr=nx184.node01.secure-mailgate.com
Authentication-Results: mx1.messagingengine.com;
bimi=skipped (DMARC did not pass)
Authentication-Results: mx1.messagingengine.com;
arc=none (no signatures found)
Authentication-Results: mx1.messagingengine.com;
dkim=none (no signatures found);
dmarc=none policy.published-domain-policy=none
policy.applied-disposition=none policy.evaluated-disposition=none
(p=none,d=none,d.eval=none) policy.policy-from=p
header.from=delta.blinzeln.de;
iprev=pass smtp.remote-ip=89.22.108.184
(nx184.node01.secure-mailgate.com);
spf=none smtp.mailfrom=alice@delta.blinzeln.de
smtp.helo=nx184.node01.secure-mailgate.com
From: forged-authres-added@example.com
Authentication-Results: aaa.com; dkim=pass header.i=@example.com
Authentication-Results: aaa.com; dkim=pass header.i=@example.com