{"action":"created","issue":{"url":"https://api.github.com/repos/fastmail/authentication_milter/issues/4","repository_url":"https://api.github.com/repos/fastmail/authentication_milter","labels_url":"https://api.github.com/repos/fastmail/authentication_milter/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/fastmail/authentication_milter/issues/4/comments","events_url":"https://api.github.com/repos/fastmail/authentication_milter/issues/4/events","html_url":"https://github.com/fastmail/authentication_milter/pull/4","id":147331087,"number":4,"title":"Remove \"X-Google-DKIM-Signature\"","user":{"login":"wzyboy","id":459384,"avatar_url":"https://avatars.githubusercontent.com/u/459384?v=3","gravatar_id":"","url":"https://api.github.com/users/wzyboy","html_url":"https://github.com/wzyboy","followers_url":"https://api.github.com/users/wzyboy/followers","following_url":"https://api.github.com/users/wzyboy/following{/other_user}","gists_url":"https://api.github.com/users/wzyboy/gists{/gist_id}","starred_url":"https://api.github.com/users/wzyboy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wzyboy/subscriptions","organizations_url":"https://api.github.com/users/wzyboy/orgs","repos_url":"https://api.github.com/users/wzyboy/repos","events_url":"https://api.github.com/users/wzyboy/events{/privacy}","received_events_url":"https://api.github.com/users/wzyboy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-04-11T06:48:55Z","updated_at":"2016-04-15T09:43:45Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/fastmail/authentication_milter/pulls/4","html_url":"https://github.com/fastmail/authentication_milter/pull/4","diff_url":"https://github.com/fastmail/authentication_milter/pull/4.diff","patch_url":"https://github.com/fastmail/authentication_milter/pull/4.patch"},"body":"As far as I can see, the `X-Google-DKIM-Signature` header is only used by Google internally. It should not be considered as a public header (it's started with `X-` anyway). A mail with only `X-Google-DKIM-Signature` and without proper `DKIM-Signature` should not be considered DKIM valid.\r\n\r\nRef: https://www.ietf.org/mail-archive/web/apps-discuss/current/msg11956.html"},"comment":{"url":"https://api.github.com/repos/fastmail/authentication_milter/issues/comments/210390363","html_url":"https://github.com/fastmail/authentication_milter/pull/4#issuecomment-210390363","issue_url":"https://api.github.com/repos/fastmail/authentication_milter/issues/4","id":210390363,"user":{"login":"marcbradshaw","id":6148082,"avatar_url":"https://avatars.githubusercontent.com/u/6148082?v=3","gravatar_id":"","url":"https://api.github.com/users/marcbradshaw","html_url":"https://github.com/marcbradshaw","followers_url":"https://api.github.com/users/marcbradshaw/followers","following_url":"https://api.github.com/users/marcbradshaw/following{/other_user}","gists_url":"https://api.github.com/users/marcbradshaw/gists{/gist_id}","starred_url":"https://api.github.com/users/marcbradshaw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marcbradshaw/subscriptions","organizations_url":"https://api.github.com/users/marcbradshaw/orgs","repos_url":"https://api.github.com/users/marcbradshaw/repos","events_url":"https://api.github.com/users/marcbradshaw/events{/privacy}","received_events_url":"https://api.github.com/users/marcbradshaw/received_events","type":"User","site_admin":false},"created_at":"2016-04-15T09:43:45Z","updated_at":"2016-04-15T09:43:45Z","body":"Thanks for the pr.\r\n\r\nIn practice it is useful to determine if an email originated via gmail, but I take your point that it shouldn't cause a message without other valid signatures to have a valid dkim status.\r\n\r\nI'm leaning towards checking those separately and adding a corresponding x-google-dkim result."}}