Re: DomainKeys signature no longer valid in 0.4.2 [solved]

[Greg N. <gpn...@eo...>]

>A DK key record and a DKIM key record are generally compatible but have
>slightly different tag semantics.  Under DomainKeys, for example, the
>granularity "g=" had an ambiguous meaning while under DKIM it means
>"nobody can use this key".
>
>However, the key record you're using looks fine for both.

Thanks to SM and Murray I was able to track down the problem. I 
needed to add a -H option to the command line to get it to explicitly 
list all of the headers. For some reason, sendmail started adding a 
'Message-Id' header that was either previously ignored by past 
versions of the milter, or something quirky happened to sendmail 
locally. In either case, adding the -H option now makes everything 
verify again. I'll need to remember that 'r=' option for the policy. 
That's relatively useful.

Thanks to both of you for your help in tracking this down.

- Greg