Last modified: 2014-07-03 16:22:41 UTC
As a reminder: Echo user no-reply-notifications@wikipedia.org (or @mediawiki.org etc.) in the From: and Reply-To of its email notifications, while the true sender wiki@wikimedia.org is left to the internals of Received headers. A user posted headers of a message caught by Yahoo! spam filters which shows they want DKIM headers for the domain in question (unlike SPF which checks wikimedia.org), so it should be added for all projects: wikipedia.org and mediawiki.org to start with, but also the others for future deployments. Authentication-Results: mta1066.mail.gq1.yahoo.com from=wikipedia.org; domainkeys=neutral (no sig); from=wikipedia.org; dkim=neutral (no sig) https://en.wikipedia.org/w/index.php?title=Wikipedia:Village_pump_%28technical%29&oldid=579580929#WMF_notification_email_marked_as_spam_by_Yahoo
also see: https://rt.wikimedia.org/Ticket/Display.html?id=5585
(In reply to comment #1) > also see: https://rt.wikimedia.org/Ticket/Display.html?id=5585 I received an e-mail that this RT ticket has been closed because this bug report was marked fixed. I think the e-mail was mistaken, though perhaps this issue is now resolved/fixed and the bug report simply needs to be updated? I'm a little confused.
Not fixed. Both (bug 53569) notifications received on a gmail box for https://en.wikipedia.org/?diff=next&oldid=567291664 show no DKIM info. Received-SPF: pass (google.com: domain of wiki@wikimedia.org designates 208.80.152.133 as permitted sender) client-ip=208.80.152.133; Authentication-Results: mx.google.com; spf=pass (google.com: domain of wiki@wikimedia.org designates 208.80.152.133 as permitted sender) smtp.mail=wiki@wikimedia.org; dmarc=pass (p=NONE dis=NONE) header.from=wikimedia.org
All Wikimedia outgoing mail should be signed with DKIM now. We have no strict DMARC policy yet and it's unsure whether we'll decide to do so anytime soon, though.
