Add additional headers to DKIM signature

By default OpenDKIM will sign just `From`, `To`, `Sender`, `Subject` and `Date`. It makes sense to also sign other headers (especially `Reply-To`) to make sure nobody fiddles with the email.
jb68 · Sep 17, 2019 · 4d6919e · 4d6919e
1 parent ecfb59d
commit 4d6919e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/opendkim.conf b/opendkim.conf
@@ -19,3 +19,6 @@ SignatureAlgorithm      rsa-sha256
 
 UserID                  opendkim:opendkim
 Socket                  inet:8891@localhost
+
+SignHeaders             From,Sender,To,CC,Subject,Message-Id,Date,MIME-Version,Content-Type,Reply-To
+OversignHeaders         From,Sender,To,CC,Subject,Message-Id,Date,MIME-Version,Content-Type,Reply-To