- Shipped
- September 16, 2026 at 5:42 PM UTC
- Author
- Kamo
- Commit
- 1bb0fd9
DkimKeys generates a domain's RSA-2048 key (kept in the org's encrypted bulk provider blob) and the TXT value a member publishes at kamoXXXXXX._domainkey.<domain>. DkimSigner signs a message exactly as the transport will send it — read from writeTo after the final saveChanges — covering From and whichever of the headers receivers and feedback loops use are present (Feedback-ID included, never an X- header, since the relay strips X-Kamo-Ref). Verified in tests by Apache jDKIM, an independent implementation: a campaign- shaped message verifies, still verifies once the relay strips X-Kamo-Ref, and fails on a changed body or Subject.