mirror of
https://blitiri.com.ar/repos/chasquid
synced 2026-10-28 15:02:28 +00:00
Alberto Bertogli
5c4193a8b6
Today, we treat l=0 to mean the whole body is signed. However, RFC 6376 is clear that means _none_ of the body is signed. This patch fixes that behaviour to match the RFC. Cross-checking other implementations for potential compatibility issues, OpenDKIM and Exim both treat l=0 the same way this patch does. In practice, l=0 is extremely rare, and that's why this incorrect behaviour persisted unnoticed for so long. Note this incorrect behaviour would cause valid signatures to fail to verify, but never allow invalid signatures to pass.