[Mimedefang] What about DKIM

[kd6lvw at yahoo.com]

--- On Wed, 5/1/13, John Halewood <john at unidec.co.uk> wrote:
> It's still there, still worthless. I recently received an
> email from an (upstream) ISP as Yahoo! had complained to
> them that one of our sites was "sending out spam". Looking
> at the message, it turned out to be a bounce from a
> non-existent address (actually someone who'd left a few
> months ago) to an email sent from, err, a Yahoo! account -
> as verified by the headers (passed all their outgoing checks
> with no problem). Odd that they only seem to notice spam
> going one way.

DKIM doesn't validate the spaminess of the content.  Why do you think it does?

All it does is to authenticate the source of the message.  This way, you know the spammer is who he claimed to be (or not).  When properly set up, it will identify forged and tampered messages to you; that's all.