Bug 31993 – Support for DKIM and SPF

Bug 31993 - Support for DKIM and SPF


Summary:	Support for DKIM and SPF

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	Mail
Version:	UCS 5.0
Hardware:	Other Linux

Importance:	P3 enhancement with 7 votes (vote)
Target Milestone:	---
Assigned To:	Mail maintainers
QA Contact:

URL:
Keywords:

Depends on:	50777
Blocks:
	Show dependency tree / graph

Reported:	2013-07-17 10:14 CEST by Kevin Dominik Korte
Modified:	2023-08-17 09:35 CEST (History)
CC List:	11 users (show)

See Also:
What kind of report is it?:	Feature Request
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:	Yes
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2013110521001254, 2017041121000713
Bug group (optional):	Roadmap discussion (moved)
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Kevin Dominik Korte

2013-07-17 10:14:33 CEST

DomainKeys Identified Mail (DKIM) is a method for associating a domain name to an email message, thereby verifying the identity of a mailserver. This is greatly used within the reduction of Spam, as each message is signed by the sending mailserver, which the receiver can verify from the certificate included in a special dns record.

It would therefore be good, if opendkim would be integrated into postfix, so that postfix would sign outgoing messages. In addition the download of the public key for the inclusion into dns would have to be documented.

The Request has a certain importans as the dutch government is mandating the usage of DKIM for all new mailserver. Likewise the BSI-Grundschutz is recommending its usage.

https://www.bsi.bund.de/cae/servlet/contentblob/485898/publicationFile/30941/isi_mail_server_checkliste_generisch_pdf.pdf

https://lijsten.forumstandaardisatie.nl/open-standaard/dkim

Comment 1 Ingo Steuwer

2013-11-05 09:28:44 CET

request for SPF Records in DNS: 2013110521001254

Comment 2 Daniel Tröder

2017-05-02 11:41:31 CEST

There is already client support for both SPF and DKIM in SpamAssassin.

We are thinking about:
* DKIM signing for sending
* SPF DNS record wizard

Adding SPF records to the UCS domains DNS server does only make sense, when it is the official, public DNS server for the domain.

When working on any of these, please split the bug.

Comment 3 Stefan Gohmann

2017-06-16 20:39:37 CEST

This issue has been filed against UCS 3. UCS 3 is out of the normal maintenance and many UCS components have vastly changed in UCS 4.

If this issue is still valid, please change the version to a newer UCS version otherwise this issue will be automatically closed in the next weeks.

Comment 4 Dirk Ahrnke

2020-02-04 12:10:19 CET

DKIM-Support requested during a project.

As a first step to get this done it would help to move the packages "opendkim, opendkim-tools and postfix-policyd-spf-python" to maintained.

Comment 5 Erik Damrose

2020-02-04 16:18:16 CET

(In reply to Dirk Ahrnke from comment #4)
> As a first step to get this done it would help to move the packages
> "opendkim, opendkim-tools and postfix-policyd-spf-python" to maintained.

I created bug 50777 for this task

Comment 6 Philipp Hahn

2023-08-17 09:35:34 CEST

Our own infrastructure for univention.{de,com,…} is affected by this...
This is still an issue with UCS 5.0.