injected body trailers
Kees Cook
keescook at chromium.org
Thu Oct 21 13:22:31 PDT 2021
Hi!
So, I just saw a DKIM failure, and it was entirely justified. :)
Grabbing thread from lore.kernel.org/all/20211021142516.1843042-1-ardb%40kernel.org/t.mbox.gz
Checking for newer revisions on https://lore.kernel.org/all/
Analyzing 1 messages in the thread
Checking attestation on all messages, may take a moment...
---
✓ [PATCH] ARM: stackprotector: prefer compiler for TLS based per-task protector
✓ Signed: openpgp/ardb at kernel.org
✗ BADSIG: DKIM/kernel.org
✓ Signed: DKIM/lists.infradead.org (From: ardb at kernel.org)
---
This is https://lore.kernel.org/all/20211021142516.1843042-1-ardb@kernel.org/
and for some reason, the linux-arm-kernel mailing list is injecting a
body trailer.
I just downloaded this directly and removed the trailer, and the DKIM
passed. This experience has raise a few questions...
1) Can (should) b4 grow logic to progressively strip lines off the end
of a body until DKIM passes?
2) Can the linux-arm-kernel mailing list please stop breaking DKIM?
Who should authorize this change (rmk, Catalin)? And who can make
the change (peterz)?
(I realize now that all the mail from linux-arm-kernel has been
getting dropped into my Spam folder -- I normally don't notice since
I'm usually CCed directly or via some other list on things I wanted
to see.)
3) Are there other lists for which lore is collecting emails where DKIM
is persistently broken, and can we fix those lists too?
Thoughts?
-Kees
--
Kees Cook
More information about the linux-arm-kernel
mailing list