/ 
Mail-DKIM2-0.25

Changes for version 0.25 - 2026-10-20

  • Which error is reported when a message has more than one fault (the interop contract's C9, so every implementation names the same one), and one verdict.
  • Section 14.2: the chain's structure before any field's content, in a fixed order: too many fields; a Message-Instance with no usable m=; an m= given twice; a DKIM2-Signature with no usable i= (or one out of range); an i= given twice; a missing Message-Instance; an instance no signature covers; a missing DKIM2-Signature. Then each Message-Instance's content by ascending m= (it was highest first), then each signature's.
  • A number given twice is reported by its lowest value, not the first met.
  • Section 14.7: within one instance every header hash, in the order h= lists the algorithms, before any body hash (it was each algorithm in turn, alphabetically).
  • A Message-Instance with no m= is "PERMERROR: Message-Instance m= tag=m missing" (was "... without m= tag"); new constant Mail::DKIM2::Common::MI_MISSING_M_ERROR.
  • The structure is judged at the end of the header fields, so a message whose chain is broken there stops before any key is fetched.
  • Verdict change: a message with no DKIM2-Signature and a gap in its Message-Instances (only m=2, say) is "PERMERROR: Message- Instance m=1 missing" with AllowUnsignedMI or MidProcess too; it used to be "none" there. "none" is only for a message with no DKIM2 field at all. (The reflector, which uses AllowUnsignedMI, no longer bridge-signs such a message.)

Documentation

dkim2-milter
Standalone DKIM2 milter for Postfix

Modules

Mail::DKIM2
DKIM2 signing and verification for email
Mail::DKIM2::BodyPlan
every Message-Instance's body hash in one pass
Mail::DKIM2::Common
Canonicalization, hashing, folding and key handling for DKIM2
Mail::DKIM2::DSN
DKIM2-signed Delivery Status Notifications
Mail::DKIM2::Digest
SHA-2 over message content, by OpenSSL where it can
Mail::DKIM2::Gate
decide whether a front end may sign a message
Mail::DKIM2::HeaderParser
Streaming message parser base for Signer and Verifier
Mail::DKIM2::HeaderPlan
every Message-Instance's header hash without undo
Mail::DKIM2::MessageInstance
Compute, verify and undo Message-Instance headers
Mail::DKIM2::MessageStore
Keep message snapshots keyed by Message-Instance
Mail::DKIM2::Reflector
verify-and-reflect DKIM2 demonstration logic for dkim2.com
Mail::DKIM2::Signature
One DKIM2-Signature header, parsed or under construction
Mail::DKIM2::Signer
Sign a message with a DKIM2-Signature header
Mail::DKIM2::Split
Bcc-safe recipient grouping before DKIM2 signing
Mail::DKIM2::TagValueList
The tag=value list a DKIM2 header is made of
Mail::DKIM2::Validate
structured per-level DKIM2 and Message-Instance report
Mail::DKIM2::Verifier
Verify the DKIM2-Signature chain on a message
Mail::DKIM2::Wrap
wrap a single-part message in a one-part multipart/mixed
Mail::Milter::Authentication::Handler::DKIM2Sign
Handler class for DKIM2 signing
Mail::Milter::Authentication::Handler::DKIM2Verify
Handler class for DKIM2 signature verification

Examples

Other files