Signatures not recognized without -H flag?

[Peter W. <pw...@ch...>]

Greetings,

I'm working on implementing DomainKeys for our company, and we're using
dk-milter to sign our outgoing email. After some fiddling around, I was
able to send out signed emails and have them verified by Yahoo and by
the verifier app at http://senderid.espcoalition.org/. However, I didn't
get this working until I added the -H flag, which to my understanding
adds a list of the headers used in the signature, to the signature
header itself. Without that flag, Yahoo was saying that my signature was
"bad". Any idea why having the -H flag would make my signature "good"?

Also, it seems to me that the -H flag is forcing Milter insert messages
to be written to the syslog, even though we are not using the -l flag.
Is there any reason for that?

We're running dk-filter 0.6.0 with Sendmail 8.13.8.

Thanks,

Peter