Change to Mail Infrastructure - SPF and DKIM verification will now be enforced

[Ben Cooksley]

On Wed, Dec 2, 2015 at 10:06 PM, Ben Cooksley <bcooksley at kde.org> wrote:
> Hi all,
>
> Just a quick announcement to inform everyone that I have now adjusted
> the KDE.org mail filter configuration to:
>
> a) Enforce SPF rules as specified by the domain
> b) Temporarily reject any mail which does not successfully pass DKIM
> validation where the domain specifies it is DKIM enabled.

I've had to disable DKIM validation, as Debian's infrastructure does
not oversign any email which transits through their mailing lists
(they don't appear to have enabled DKIM at all, which is
disappointing).

This means all mails to Debian mailing lists which get modified
(changes to body and subject at the very least, as well as any other
header specified by the DKIM signer) aren't accepted by any system
performing DKIM enforcement.

Email which transits through KDE.org mailing lists is always
oversigned to avoid this issue.

People who subscribe to Debian mailing lists using kdemail.net or
kde.org addresses are advised to file tickets with Debian's
Infrastructure team requesting they correct this omission.

I will be re-enabling DKIM validation in one week's time - which will
then break subscriptions to Debian mailing lists (as any email from
anyone who has enabled DKIM which hits their lists will not be
accepted by KDE email infrastructure)

>
> Please let sysadmin know of any issues.
>
> Regards,
> Ben

Regards,
Ben