带有自定义邮件标题的DKIM？

Question

I am very successfully using PHPMailer to send out SPF/DKIM emails from my website. 我非常成功地使用PHPMailer从我的网站发送了SPF / DKIM电子邮件。 Successfully as in its spam-rating has gone to practically zero. 垃圾邮件评级成功地几乎达到了零。

However, I would like to add a custom mail header to the signature as to have some authenticity of its value. 但是，我想向签名添加自定义邮件头，以使其值具有一定的真实性。

Can this be done? 能做到吗？
Can this be done with PHPMailer? 可以用PHPMailer完成吗？
If yes: how? 如果是：如何？

Illustration: 插图：

Let's say I have a custom field X-app-originalSender . 假设我有一个自定义字段X-app-originalSender 。

When I look at the source of an outgoing email message, I see 当我查看外发电子邮件的来源时，我看到了

Received-SPF: none (gogol.com: mister+caf_=example=internet.com@example.com does not designate permitted sender hosts) client-ip=2607:f8b0:4003:c02::22e;
Received-SPF: pass (gogol.com: domain of server@website.com designates 10.10.10.10 as permitted sender) client-ip=10.10.10.10;
To: mister@example.com
Subject: Whatever
Date: Tue, 6 May 2014 14:19:59 +0200
From: "website.com Warning" <server@website.com>
Reply-To: "website.com Warnung" <server@website.com>
Message-ID: <59052014140619-L73ESg5cau@website.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;

I am most intrigued by the line h=From:To:Subject; 我最感兴趣的是h=From:To:Subject; and am assuming there must be a way to add my custom field to it. 并假设必须有一种方法可以向其中添加我的自定义字段。

How? 怎么样？

DKIM Specs DKIM规格

from http://dkim.org/specs/draft-allman-dkim-base-01.html#rfc.section.3.5 来自http://dkim.org/specs/draft-allman-dkim-base-01.html#rfc.section.3.5

Signed header fields (plain-text, but see description; REQUIRED). 签名的标头字段（纯文本，但请参见描述；必填）。 A colon-separated list > of header field names that identify the header fields presented to the signing algorithm. 标题字段名称的冒号分隔列表>，用于标识呈现给签名算法的标题字段。 The field MUST contain the complete list of header fields in the order presented to the signing algorithm. 字段必须按照提交给签名算法的顺序包含标头字段的完整列表。 The field MAY contain names of header fields that do not exist when signed; 该字段可以包含在签名时不存在的标题字段的名称； nonexistent header fields do not contribute to the signature computation (that is, they are treated as the null input, including the header field name, the separating colon, the header field value, and any CRLF terminator), and when verified non-existent header fields MUST be treated in the same way. 不存在的标头字段不会有助于签名计算（也就是说，将它们视为空输入，包括标头字段名称，分隔冒号，标头字段值和任何CRLF终止符），以及在验证不存在的标头时字段必须以相同的方式处理。 The field MUST NOT include the DKIM-Signature header field that is being created or verified. 该字段不得包含正在创建或验证的DKIM-Signature标头字段。 Folding white space (FWS) MAY be included on either side of the colon separator. 冒号分隔符的两侧都可以包含折叠空格（FWS）。 Header field names MUST be compared against actual header field names in a case insensitive manner. 报头字段名称必须以不区分大小写的方式与实际的报头字段名称进行比较。 ABNF: sig-h-tag = "h=" FWS hdr-name 0 ( *FWS ":" *FWS hdr-name ) hdr-name = field-name INFORMATIVE EXPLANATION: By "signing" header fields that do not actually exist, a signer can prevent insertion of those header fields before verification. ABNF：sig-h-tag =“ h =” FWS hdr-name 0 （* FWS“：” * FWS hdr-name）hdr-name =字段名信息说明：通过“签名”实际上不存在的头字段，签名者可以防止在验证之前插入这些标头字段。 However, since a sender cannot possibly know what header fields might be created in the future, and that some MUAs might present header fields that are embedded inside a message (eg, as a message/rfc822 content type), the security of this solution is not total. 但是，由于发件人可能无法知道将来可能会创建哪些头字段，并且某些MUA可能会提供嵌入在消息中的头字段（例如，作为消息/ rfc822内容类型），因此此解决方案的安全性在于不完全是。 INFORMATIVE EXPLANATION: The exclusion of the header field name and colon as well as the header field value for non-existent header fields prevents an attacker from inserting an actual header field with a null value. 信息说明：头字段名称和冒号以及不存在的头字段的头字段值都被排除在外，可防止攻击者插入具有空值的实际头字段。

Answer 1

You are right that it's possible to include arbitrary headers in a DKIM signature, but PHPMailer does not provide a means of doing that. 没错，可以在DKIM签名中包含任意标头，但是PHPMailer不提供这样做的方法。 The DKIM_Add method is where the interesting bit happens, and you can see in there that h=From:To:Subject; DKIM_Add方法是有趣的地方，您可以在其中看到h=From:To:Subject; is hard-coded. 硬编码。 Probably the easiest way around this is to subclass PHPMailer and rewrite this function to include your extra headers. 解决此问题的最简单方法可能是将PHPMailer子类化并重写此函数以包含您的额外标头。

带有自定义邮件标题的DKIM？

问题描述

1 个解决方案

解决方案1
0 已采纳 2014-07-09 09:16:47

带有自定义邮件标题的DKIM？

问题描述

1 个解决方案

解决方案1 0 已采纳 2014-07-09 09:16:47

解决方案1
0 已采纳 2014-07-09 09:16:47