Identifier Alignment with `dkimverify`
Opened this issue · 0 comments
link2xt commented
Looking at dkimverify usage, I don't understand how it decides if the domain which provided a valide DKIM signature is supposed to sign this email.
Not checking that domain corresponds to the From field is like verifying a TLS certificate without checking that it is a certificate for a domain that is in the URL.
So how do I specify the domain? Would be nice if dkimverify accepts the domain as an argument or extracts it from the message From field.
See DMARC standard for more: https://www.rfc-editor.org/rfc/rfc7489#section-3.1.1