Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Sykje yn Support

Mij stipescams. Wy sille jo nea freegje in telefoannûmer te beljen, der in sms nei ta te stjoeren of persoanlike gegevens te dielen. Meld fertochte aktiviteit mei de opsje ‘Misbrûk melde’.

Learn More

Dizze konversaasje is argivearre. Stel in nije fraach as jo help nedich hawwe.

DKIM Validation Fails

  • 5 antwurd
  • 2 hawwe dit probleem
  • 3 werjeftes
  • Lêste antwurd fan christ1

more options

When using Thunderbird v52+, I continually get DKIM validation errors on the receiving end. All other clients are fine (whether they also send via IMAPS or client protocols).

The exact DKIM failure: dkim=neutral (body hash did not verify)

So, Thunderbird is doing something to the body to cause failures.

Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0

When using Thunderbird v52+, I continually get DKIM validation errors on the receiving end. All other clients are fine (whether they also send via IMAPS or client protocols). The exact DKIM failure: dkim=neutral (body hash did not verify) So, Thunderbird is doing something to the body to cause failures. Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0

Alle antwurden (5)

more options

Presumably you did install an extension for DKIM validation. Check with the extension author.

more options

christ1 said

Presumably you did install an extension for DKIM validation. Check with the extension author.

No, no extensions are installed. DKIM is added by my relay agent.

more options
No, no extensions are installed. DKIM is added by my relay agent.

I don't understand this. Thunderbird does not support DKIM validation natively, it needs an add-on for this. You implied you're doing DKIM validation using Thunderbird, but how? What is your 'relay agent'?

more options

christ1 said

No, no extensions are installed. DKIM is added by my relay agent.

I don't understand this. Thunderbird does not support DKIM validation natively, it needs an add-on for this. You implied you're doing DKIM validation using Thunderbird, but how? What is your 'relay agent'?

No, I did not imply that Thunderbird did the validation. What I said was the result of the validation is always "Body hash did not verify" when sending from Thunderbird, and that all other mail clients are fine.

DynU

more options
Thunderbird is doing something to the body to cause failures.

No, the DKIM signature is added by your relay agent *after* the message has been sent by Thunderbird. So this is not a Thunderbird problem.

My best guess is your relay agent is the problem. Note, the elements you (or your email provider) decided to include in the DKIM signing process must remain unchanged in transit, or the DKIM signature will fail authentication.