DKIMSTATUS - plugin for roundcube
DKIMSTATUS displays the status of the DKIM Signature of each email your read in Roundcube.
Download
latest: dkimstatus-v0.4.3.tar
Description
DKIMSTATUS parses the results of the DKIM (or SPF) validation of a message. It requires that incoming emails are previously checked by a DKIM validation engine (such as dkimproxy). DKIMSTATUS displays the status of the DKIM signature of the message next to the 'From' field of the email.
A signature status can have one of the 4 following states:
- no signature information
- invalid signature (most likely, the message has been modified after the signature has been applied)
- valid signature from a 3rd party domain (ie. not the domain of the author)
- valid signature from the domain of the author (the message can be trusted as coming from the author)
DKIMSTATUS has been tested and validated with DKIMproxy 0.3 beta 1 and Amavis 2.6.1 (both using Mail::DKIM perl module by Jason Long).
Version 0.4.2 has been tested and validated with roundcube 0.3. Version 0.4.3 has been tested and validated with roundcube 0.4.
Changelog
0.4.3: from Sergio Cambra: SPF fix, image function and spanish translation 0.4.2 : added translations: Polish (thanks to Tomasz Chiliński), Romanian and German
Installation
Untar the archive in your plugin folder and add 'dkimproxy' to your list of activated plugin in Roundcube's main.inc.php config file.
// List of active plugins (in plugins/ directory)
$rcmail_config'plugins' = array('managesieve', 'vcard_attachments', 'dkimstatus');
Contact
julien { at } linuxwall.info
Screenshots
Valid signature from the author's domain
Third party signature
Invalid signature (due to mailing list manipulation, probably)
Publié le mercredi, août 11 2010 par Julien Vehent
Commentaires
DKIM check does not produce any header (see rfc4871).
"Authentication-results" header is described in the rfc5451.
This plugin wrong parse "Authentication-results" header.
Strictly speaking, yes, you are right. But the goal of this plugin is not to perform the DKIM validation, but to simply display it.
Therefore, it needs a information to rely on, and the Authentication-Result header is probably the most appropriate for that.
There is a number of improvements, such as parsing several consecutive Authentication-Results, that I would like to work on. If you have any request or comment, feel free to post them here.