DKIM signatures stripped from -owner messages with anonymous lists

Bug #1645901 reported by Robert Mathews
This bug affects 1 person
Affects Status Importance Assigned to Milestone
GNU Mailman
Mark Sapiro

Bug Description

If a list is set to be an anonymous list, and a message is sent to the -owner address, Mailman strips any existing DKIM header.

This means that if someone from a DMARC-restricted address (e.g. is sending a message that would get forwarded to an owner at a DMARC-checking ISP (e.g., the message is rejected: it fails the DMARC check due to non-matching SPF and missing DKIM headers. If the DKIM header was left intact, it should work, since Mailman didn't modify the body for an -owner message.

It makes privacy sense to always strip DKIM headers on messages that will be posted to an anonymous list. And it can work out okay because DMARC munging mitigation can be applied afterwards.

But it doesn't seem to make sense to do the same for -owner messages on anonymous lists. Mailman doesn't apply other anonymous list modifications, like hiding the "From:" header, for -owner messages, as far as I can tell.

This happens, by the way, due to

# This is the pipeline which messages sent to the -owner address go through

Is 'CleanseDKIM' really helpful in this -owner flow? Removing it would solve this problem. Alternately, perhaps CleanseDKIM could be taught to exempt -owner addresses on anonymous lists.

Related branches

Revision history for this message
Mark Sapiro (msapiro) wrote :

Thanks for your report. I agree that CleanseDKIM should not be in OWNER_PIPELINE and I have removed it for the next release.

In the mean time, you can always put



Changed in mailman:
assignee: nobody → Mark Sapiro (msapiro)
importance: Undecided → Medium
milestone: none → 2.1.24
status: New → Fix Committed
Mark Sapiro (msapiro)
Changed in mailman:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers