DKIM Deployment

[Jesse Thompson <>]

On 1/14/2010 10:12 AM, Dave CROCKER wrote:
> On 1/13/2010 11:57 PM, Serge Aumont wrote:
> > Do you mean that DKIM canonicalization algorithm should convert all
> > headers when preparing message from signature or verification ?
>
>
> Yes. From RFC 4871:
>
> 3.4.2 The "relaxed" Header Canonicalization Algorithm
>
> The "relaxed" header canonicalization algorithm MUST apply the following
> steps in order:
>
> * Convert all header field names (not the header field values) to
> lowercase.
> ...

MUST the "relaxed" header canonicalization algorithm be applied?

If so, this is a bug with Sophos' DKIM verification implementation.

Jesse

--
  Jesse Thompson
  Division of Information Technology, University of Wisconsin-Madison
  Email/IM:

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature