From 40c93ffe5219bb501de595c8f38789d0719e1d34 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jagoda=20=C5=9Al=C4=85zak?= Date: Thu, 29 Jan 2026 11:30:13 +0100 Subject: [PATCH] docs: Update DKIM section in overview.rst MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit We are now using dkim-milter instead of OpenDKIM. Signed-off-by: Jagoda Ślązak --- doc/source/overview.rst | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/doc/source/overview.rst b/doc/source/overview.rst index 264703fd..00ed4048 100644 --- a/doc/source/overview.rst +++ b/doc/source/overview.rst @@ -268,12 +268,10 @@ Chatmail relays enforce :rfc:`DKIM <6376>` to authenticate incoming emails. Incoming emails must have a valid DKIM signature with Signing Domain Identifier (SDID, ``d=`` parameter in the DKIM-Signature header) equal to the ``From:`` header domain. This property is checked -by OpenDKIM screen policy script before validating the signatures. This +by dkim-milter ``reject_failures = author-mismatch `` policy. This corresponds to strict :rfc:`DMARC <7489>` alignment (``adkim=s``). If there is no valid DKIM signature on the incoming email, the sender receives a “5.7.1 No valid DKIM signature found” error. -After validating the DKIM signature, -the `final.lua` script strips all ``OpenDKIM:`` headers to reduce message size on disc. Note that chatmail relays