Re: [dkim-milter-discuss] Validation failures..

[Andy F. <dk...@fi...>]

On Thu, 27 Mar 2008, Murray S. Kucherawy wrote:
; This is a bug in the filter related to ASP evaluation.  Thanks to Andy for
; providing a test case.

This got me thinking. I understand that the filter failed to find a valid
author signature in the message due to a bug, but given that my DKIM key
has the testing flag on it, should the message really have been
flagged with permerror?

There's nothing in the ASP draft relating to testing mode but RFC4871
says:

> This domain is testing DKIM.  Verifiers MUST NOT treat
> messages from signers in testing mode differently from
> unsigned email, even should the signature fail to verify.

I could read that to mean that the DKIM verifier shouldn't flag the
message in any way even if it fails validation due to ASP.

Any thoughts?

Andy