<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 12pt; font-family: Verdana,Geneva,sans-serif'>
<p id="reply-intro">On 11/11/2023 20:44, Dino Edwards wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div id="replybody1">
<style type="text/css">@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Verdana;
        panose-1:2 11 6 4 3 5 4 4 2 4;}

#replybody1 p.v1MsoNormal, #replybody1 li.v1MsoNormal, #replybody1 div.v1MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
#replybody1 a:link, #replybody1 span.v1MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
#replybody1 a:visited, #replybody1 span.v1MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
#replybody1 p.v1msonormal0, #replybody1 li.v1msonormal0, #replybody1 div.v1msonormal0
        {mso-style-name:msonormal;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
#replybody1 p.v1v1msonormal, #replybody1 li.v1v1msonormal, #replybody1 div.v1v1msonormal
        {mso-style-name:v1msonormal;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
#replybody1 p.v1v1msochpdefault, #replybody1 li.v1v1msochpdefault, #replybody1 div.v1v1msochpdefault
        {mso-style-name:v1msochpdefault;
        mso-margin-top-alt:auto;
        margin-right:0in;
        mso-margin-bottom-alt:auto;
        margin-left:0in;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
#replybody1 span.v1v1msohyperlink
        {mso-style-name:v1msohyperlink;}
#replybody1 span.v1v1msohyperlinkfollowed
        {mso-style-name:v1msohyperlinkfollowed;}
#replybody1 span.v1v1emailstyle17
        {mso-style-name:v1emailstyle17;}
#replybody1 p.v1v1msonormal1, #replybody1 li.v1v1msonormal1, #replybody1 div.v1v1msonormal1
        {mso-style-name:v1msonormal1;
        margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
#replybody1 p.v1v1msonormal2, #replybody1 li.v1v1msonormal2, #replybody1 div.v1v1msonormal2
        {mso-style-name:v1msonormal2;
        margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
#replybody1 span.v1v1msohyperlink1
        {mso-style-name:v1msohyperlink1;
        mso-style-priority:99;
        color:#0563C1;
        text-decoration:underline;}
#replybody1 span.v1v1msohyperlinkfollowed1
        {mso-style-name:v1msohyperlinkfollowed1;
        mso-style-priority:99;
        color:#954F72;
        text-decoration:underline;}
#replybody1 span.v1EmailStyle28
        {mso-style-type:personal;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
#replybody1 span.v1EmailStyle29
        {mso-style-type:personal-reply;
        font-family:"Calibri",sans-serif;
        color:windowtext;}
#replybody1 .v1MsoChpDefault
        {mso-style-type:export-only;
        font-size:10.0pt;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
#replybody1 div.v1WordSection1
        {page: unset;}</style>
<div lang="EN-US">
<div class="v1WordSection1">
<p><span style="font-size: 12.0pt; font-family: 'Verdana',sans-serif;">> I've seen no problems with mail from MS, so how about you elaborate on your problems and what version of OD are you using?</span></p>
<div id="v1signature">
<p>Here's the exact issue that I just ran into with o365 mail and note this issue was reported 3 years ago. No fix yet.</p>
<p><a href="https://github.com/trusteddomainproject/OpenDKIM/issues/73" target="_blank" rel="noopener noreferrer">https://github.com/trusteddomainproject/OpenDKIM/issues/73</a></p>
<p>Granted, is it Microsoft omitting ADMD on DKIM signatures but it's not like we cannot not do business with o365 customers. This particular issue was with one of my e-mail customers doing business with the secret service and that's the issue. You have high profile organizations using o365 and your customers don't want to hear that the problem is on their end. "What do you mean the problem is on their end? This is the secret service!. It's got to be your problem!".</p>
<p>Here's my OpenDKIM version and related info:</p>
<p>opendkim -V</p>
<p>opendkim: OpenDKIM Filter v2.11.0</p>
<p>        Compiled with OpenSSL 1.1.1f  31 Mar 2020</p>
<p>        SMFI_VERSION 0x1000001</p>
<p>        libmilter version 1.0.1</p>
<p>        Supported signing algorithms:</p>
<p>                rsa-sha1</p>
<p>                rsa-sha256</p>
<p>                ed25519-sha256</p>
<p>        Supported canonicalization algorithms:</p>
<p>                relaxed</p>
<p>                simple</p>
<p>        Active code options:</p>
<p>                QUERY_CACHE</p>
<p>                USE_DB</p>
<p>                USE_LDAP</p>
<p>                USE_LUA</p>
<p>                USE_ODBX</p>
<p>                USE_UNBOUND</p>
<p>                _FFR_ATPS</p>
<p>                _FFR_RBL</p>
<p>                _FFR_REPLACE_RULES</p>
<p>                _FFR_SENDER_MACRO</p>
<p>                _FFR_STATS</p>
<p>                _FFR_VBR</p>
<p>        libopendkim 2.11.0: atps query_cache</p>
<p><br /></p>
</div>
</div>
</div>
</div>
</blockquote>
<p>OK, 2.10.3 is what we use, if you can try that? or maybe you have?</p>
<p>But Microsoft should be doing this correctly, try NANOG  there are a few MS guys I know on there, or if no response there used to be a MS guy on the mailop list, no idea if he's still there, that list is run by self important power tripping dictators so it should be a last resort port of call if your desperate, if it was google I could help much deeper :)</p>
<div id="signature">-- <br />
<p>Regards,<br />Noel Butler</p>
<table border="1" width="748" cellspacing="0" cellpadding="1">
<tbody>
<tr>
<td style="text-align: left;">
<p><span style="font-size: 9pt;"><span style="font-family: arial,helvetica,sans-serif;">This Email, including attachments, may contain legally privileged information, therefore at all times remains confidential and subject to copyright protected under international law. You may not disseminate this message without the authors express written authority to do so.   If you are not the intended recipient, please notify the sender then delete all copies of this message including attachments immediately. Confidentiality, copyright, and legal privilege are not waived or lost by reason of the mistaken delivery of this message.</span></span></p>
</td>
</tr>
</tbody>
</table>
<p><br /></p>
</div>
</body></html>