Answers.Body: <p>We did experience that for specific mail providers. Local delivery and most mail providers were fine or not having any non 7bit encoded characters.</p>
  
  <p>We ended up forcing a downconversion to 7bit encoding on our MTA prior to signing with DKIM as described here for postfix: <a href="http://postfix.1071664.n5.nabble.com/On-DKIM-and-Content-Transfer-Encoding-tp68767p68769.html" rel="nofollow noreferrer">http://postfix.1071664.n5.nabble.com/On-DKIM-and-Content-Transfer-Encoding-tp68767p68769.html</a></p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2018-07-23T11:39:10.653Z
Answers.LastActivityDate: 2018-07-23T11:39:10.653Z
Answers.UserDisplayName: Thomas Schüttler
Body: <p>We have DKIM configured with the MTA we are using with CiviCRM, and it appears to be working.  However, the DKIM signature fails consistently; using a checker it appears the mail has been altered after being signed.  Has anyone else experience of this?</p>
  
  <p>I've done some more investigation.  I have an IIS based development system. Configuring SMTP leads to the test email failing DKIM. Sending a CiviMail test environment passes DKIM.  Sending a CiviMail test from Linux Apache based test environment leads to a DKIM failure.  Webmail and Thunderbird SMTP both lead to DKIM passes.  Any suggestions?</p>
  
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2018-07-22T19:21:32.223Z
Comments.Text: Do you have a relay for outbound, i.e. your MTA just forwards to the actual outbound server? Is the FROM getting rewritten? If you send an email through the same MTA with the same FROM but not through CiviCRM, does it pass?
Comments.UserDisplayName: Demerit
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2018-07-23T15:53:26.147Z
Comments.Text: We just do a mail() or SMTP connection to our MTA.CiviCRM 5.3.1 appears to replace the From address with the Return-Path address.  Sending emails from the MTA's webmail or via IMAP from Thunderbird pass DKIM
Comments.UserDisplayName: Stephen Palmstrom
Tags: <email><mailing><mailserver>
Title: CiviMail DKIM signature failure
ThreadText: # CiviMail DKIM signature failure
  
  (Asked by: username_0 on 2018-07-21)
  
  We have DKIM configured with the MTA we are using with CiviCRM, and it appears to be working. However, the DKIM signature fails consistently; using a checker it appears the mail has been altered after being signed. Has anyone else experience of this?
  
  I've done some more investigation. I have an IIS based development system. Configuring SMTP leads to the test email failing DKIM. Sending a CiviMail test environment passes DKIM. Sending a CiviMail test from Linux Apache based test environment leads to a DKIM failure. Webmail and Thunderbird SMTP both lead to DKIM passes. Any suggestions?
  
  **Tags:** email, mailing, mailserver
  
  > **Comments:**
  > **username_1**: Do you have a relay for outbound, i.e. your MTA just forwards to the actual outbound server? Is the FROM getting rewritten? If you send an email through the same MTA with the same FROM but not through CiviCRM, does it pass?  
  > **username_0**: We just do a mail() or SMTP connection to our MTA.CiviCRM 5.3.1 appears to replace the From address with the Return-Path address.  Sending emails from the MTA's webmail or via IMAP from Thunderbird pass DKIM  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_2 on 2018-07-23. Score: 3
  
  We did experience that for specific mail providers. Local delivery and most mail providers were fine or not having any non 7bit encoded characters.
  
  We ended up forcing a downconversion to 7bit encoding on our MTA prior to signing with DKIM as described here for postfix: <http://postfix.1071664.n5.nabble.com/On-DKIM-and-Content-Transfer-Encoding-tp68767p68769.html>
  
  
  ---
  
  