Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not add Authentication-Results header when no ARC chain is present #146

Open
glts opened this issue Jul 16, 2021 · 1 comment
Open

Do not add Authentication-Results header when no ARC chain is present #146

glts opened this issue Jul 16, 2021 · 1 comment

Comments

@glts
Copy link

glts commented Jul 16, 2021

When a message does not have any ARC headers and so provides no ARC status information (usually, most messages), OpenARC will still always add a header:

Authentication-Results: mail.example.com; arc=none smtp.remote-ip=1.2.3.4

Please consider if the Authentication-Results header might not best be omitted in such cases.

Compare with OpenDKIM, which by default does not add an Authentication-Results header when no DKIM signature is present. See also OpenDKIM's AlwaysAddARHeader parameter.

This is more of a question or suggestion than a feature request.

@xvybihal
Copy link

Any thoughts on this? I really dislike that the IP is leaked via smtp.remote-ip and would welcome if it could be not added.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants