Comments only, no behaviour changed. go-milter v0.4.1 (session.go: one session per connection, replaced after a non-continue reply; macros per stage), Postfix 3.7.11 (milter8.c, smtpd_check.c reject_auth_sender_login_mismatch(), mail_addr_find.c, showq_compat.c, mail_conf_time.c, mail_params.h), Cyrus SASL 2.1.28 (saslpasswd.c, plugins/sasldb.c: deleting a missing login is not an error), OpenDKIM 2.11.0~beta2 (opendkim-db.c, opendkim-genkey), Berkeley DB 5.3 db_dump, rspamd 3.11.0. Comments that claimed what the source denies are corrected (sasldb keeps the password as given, not hashed; an embedded newline is kept, not truncated; rspamd sorts symbols by absolute weight); fixtures say seen or composed. The sender check's From: parsing gets no citations: it is replaced by the port of OpenDKIM's dkim_mail_parse next. Contradictions left for their own commits: B-G5 cleanAddress, B-PS1 first key wins, B-PQ1 the forced-expire flag, B-PQ10/PQ11 Postfix's time units. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
32 lines
1.4 KiB
Plaintext
32 lines
1.4 KiB
Plaintext
# From: lines the sender check lets through for an application of {domain}
|
|
# (audit 2026-10-12, stage 2: which key OpenDKIM signs with, seen and not
|
|
# reasoned). One Go-quoted string per line; {domain} is the application's
|
|
# domain. Two tests read this file: the check's unit test
|
|
# (internal/milter/sender_test.go) wants each line passed, and the e2e
|
|
# (test/e2e/dkim_from_test.go) sends each one and wants the message signed
|
|
# for {domain} and nothing else. A line added here is run by both. {DOMAIN}
|
|
# is {domain} in capitals; {other} is another sender of the server, which a
|
|
# line here names in a way the check's scan does not see (a space after the
|
|
# @) - passed by design, and so signed for {domain} alone.
|
|
# The lines are composed by hand; what OpenDKIM signs each with is measured,
|
|
# by the e2e on every run.
|
|
"a@{domain}"
|
|
"<a@{domain}>"
|
|
"\"The Shop\" <Orders@{domain}>"
|
|
"orders+48213@{domain}"
|
|
"\"shop@{domain}\" <a@{domain}>"
|
|
"\"Orders, returns\" <a@{domain}>"
|
|
"\"The \\\"Shop\\\"\" <a@{domain}>"
|
|
"\"someone@gmail.example\" <a@{domain}>"
|
|
"=?utf-8?b?0JzQsNCz0LDQt9C40L0=?= <a@{domain}>"
|
|
"=?windows-1251?B?zODj4Ofo7Q==?= <a@{domain}>"
|
|
"=?koi8-r?Q?=ED=C1=C7=C1=DA=C9=CE?= <a@{domain}>"
|
|
"\"A very long display name of the shop\"\r\n <a@{domain}>"
|
|
"=?utf-8?b?0JzQsNCz0LDQt9C40L0=?=\r\n\t<a@{domain}>"
|
|
"a@{domain} (the shop)"
|
|
"a@{domain} (the (nested) shop)"
|
|
"a@{DOMAIN}"
|
|
"<a@{domain}> (the shop)"
|
|
"\"a@{domain}\"@{domain}"
|
|
"\"b@ {other}\" <a@{domain}>"
|