Change to Mail Infrastructure - SPF and DKIM verification will now be enforced

Ben Cooksley bcooksley at
Thu Dec 3 06:13:07 GMT 2015

On Wed, Dec 2, 2015 at 10:06 PM, Ben Cooksley <bcooksley at> wrote:
> Hi all,
> Just a quick announcement to inform everyone that I have now adjusted
> the mail filter configuration to:
> a) Enforce SPF rules as specified by the domain
> b) Temporarily reject any mail which does not successfully pass DKIM
> validation where the domain specifies it is DKIM enabled.

I've had to disable DKIM validation, as Debian's infrastructure does
not oversign any email which transits through their mailing lists
(they don't appear to have enabled DKIM at all, which is

This means all mails to Debian mailing lists which get modified
(changes to body and subject at the very least, as well as any other
header specified by the DKIM signer) aren't accepted by any system
performing DKIM enforcement.

Email which transits through mailing lists is always
oversigned to avoid this issue.

People who subscribe to Debian mailing lists using or addresses are advised to file tickets with Debian's
Infrastructure team requesting they correct this omission.

I will be re-enabling DKIM validation in one week's time - which will
then break subscriptions to Debian mailing lists (as any email from
anyone who has enabled DKIM which hits their lists will not be
accepted by KDE email infrastructure)

> Please let sysadmin know of any issues.
> Regards,
> Ben


More information about the kde-core-devel mailing list