injected body trailers

Kees Cook keescook at chromium.org
Thu Oct 21 13:22:31 PDT 2021


Hi!

So, I just saw a DKIM failure, and it was entirely justified. :)

Grabbing thread from lore.kernel.org/all/20211021142516.1843042-1-ardb%40kernel.org/t.mbox.gz
Checking for newer revisions on https://lore.kernel.org/all/
Analyzing 1 messages in the thread
Checking attestation on all messages, may take a moment...
---
  ✓ [PATCH] ARM: stackprotector: prefer compiler for TLS based per-task protector
    ✓ Signed: openpgp/ardb at kernel.org
    ✗ BADSIG: DKIM/kernel.org      
    ✓ Signed: DKIM/lists.infradead.org (From: ardb at kernel.org)
---

This is https://lore.kernel.org/all/20211021142516.1843042-1-ardb@kernel.org/
and for some reason, the linux-arm-kernel mailing list is injecting a
body trailer.

I just downloaded this directly and removed the trailer, and the DKIM
passed. This experience has raise a few questions...

1) Can (should) b4 grow logic to progressively strip lines off the end
   of a body until DKIM passes?

2) Can the linux-arm-kernel mailing list please stop breaking DKIM?
   Who should authorize this change (rmk, Catalin)? And who can make
   the change (peterz)?
   (I realize now that all the mail from linux-arm-kernel has been
   getting dropped into my Spam folder -- I normally don't notice since
   I'm usually CCed directly or via some other list on things I wanted
   to see.)

3) Are there other lists for which lore is collecting emails where DKIM
   is persistently broken, and can we fix those lists too?

Thoughts?

-Kees

-- 
Kees Cook



More information about the linux-arm-kernel mailing list