Re: state of openarc.org

[Jered Floyd <jered@xxxxxxxxxxxxx>]

Hi Andy,

Yes, that seems quite possible.  I did not provide the full headers but I am generating the first ARC-Seal (i=1, with openARC on mailhub-use-1a.convivian.com) which the list server does successfully verify, but it is the second ARC-Seal (i=2, from the list server at dahlem.somaf.de) which fails upon return to my mail server.

In contrast, with your message I am seeing the first signature (from your outgoing sealer? simplelists.com) fail at the openarc list server, but it is not annotated why:

[...]
Authentication-Results: mailhub-use-1a.convivian.com;
	dkim=pass header.d=andybev.com header.s=selector4 header.b=ybIMQ1GJ;
	spf=pass (mailhub-use-1a.convivian.com: domain of "openarc-users+bounces-83-jered=convivian.com@xxxxxxxxxxx" designates 185.183.157.243 as permitted sender) smtp.mailfrom="openarc-users+bounces-83-jered=convivian.com@xxxxxxxxxxx";
	arc=reject ("cv is fail on i=2");
	dmarc=none
Received: from dahlem.somaf.de (localhost [127.0.0.1])
	by dahlem.somaf.de (Postfix) with ESMTP id 4TQ3YS35Ttz6tp6
	for <jered@xxxxxxxxxxxxx>; Wed, 31 Jan 2024 14:59:08 +0100 (CET)
X-Original-To: openarc-users@xxxxxxxxxxx
Received: from delivery1.simplelists.com (delivery1.simplelists.com [78.143.254.171])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384)
	(Client did not present a certificate)
	by dahlem.somaf.de (Postfix) with ESMTPS id 4TQ3YR6HtWz6tlg
	for <openarc-users@xxxxxxxxxxx>; Wed, 31 Jan 2024 14:59:07 +0100 (CET)
ARC-Seal: i=2; a=rsa-sha256; d=dahlem.somaf.de; s=arc1; t=1706709548;
	cv=fail; b=b3yMskcMnALp2MGEWHEXD2thXMdmDikdHStBTwdm8ONJf/5xDgoNwVKvJEZgH00O9asVZadHsLIaypWsJ6GjLCsfNH63b/Qi2qqp7PYinlPEU826aEFrCAx2KgvfhLRIWgu2YJ2o5vu0obijxG38LSQSP8vbwYQC77rAq6zsUeDHnqVA+FLZJuPiC+UbNBcWIjsY9miGJDvhQ2sazx1m7oozATNYvBbVI39NkwdvV6jci3vIcaNCUCNs8yLIcAU1E7m9q30pa1eosbOCiyLiVzlwH/B0JT1sbFEDJ3cPwEL708CRDZ/0bcATj2CDSilaY/bMYsrJB5lNcrUJL+l23Q==
ARC-Message-Signature: i=2; a=rsa-sha256; d=dahlem.somaf.de; s=arc1;
	t=1706709548; c=relaxed/relaxed;
	bh=/ReK8X6te/ir38rIT944IVYYrjkANlNEMlQlxxL93VA=;
	h=ARC-Message-Signature:ARC-Authentication-Results:DKIM-Signature:
	 Received:Received:Message-ID:Date:MIME-Version:User-Agent:Subject:
	 Content-Language:To:References:From:In-Reply-To:Content-Type:
	 Content-Transfer-Encoding:X-Spam-Status:X-Spam-Checker-Version:
	 X-Virus-Scanned:X-Virus-Status; b=COq0TOTs91kv+Euaa/j6CrBIO0Q0IeVqCaI5Eb1dK98f171MBs9PnXpPxGM5fxD8ENQAYpiDmo1vXAlYT79iCTgg6vyfux9IETtKsVYXiVdQkkU5BHep2pSfLoph3ViCuUKH3YJLfmtryAJ3MVQFY9qYMmDENRWpMKlSCU5+0cZFt/0Nc2SpEvcAw9lxQHkU3bVdDtZx16N+IbeYatZLbcBDc6gBfAHInbTWPclW5fPqEtB/fEkg70eIuvI+m11f9CXbGsTYshA2/5yF0L30k9ooSgtZk/QjmfHxDLIe8Bdt9K46OTo+B+trcyXQtVTXqPcm1FTJjlZaMrvCdxjUIg==
ARC-Authentication-Results: i=2; dahlem.somaf.de; dmarc=none (p=none dis=none) header.from=andybev.com; 
	spf=pass smtp.mailfrom=andybev.com; 
	arc=fail smtp.remote-ip=78.143.254.171; 
	dkim=pass (2048-bit key; unprotected) header.d=andybev.com header.i=@andybev.com header.a=rsa-sha256 header.s=selector4 header.b=ybIMQ1GJ
ARC-Seal: i=1; a=rsa-sha256; d=simplelists.com; s=arc1; t=1706709541;
	cv=none; b=iIILQ+Cco08BacRI5P4EONycie6NtEPmb3PEOeszD++OkznT99D+mc4ycYwsyvubn6DVjoi0Y8z3ObXusPwyl9ctuQhCTy5Hj4EOqarCnNthKjJOIT4FkC5lWJZvU1KDHaBZTYEpiB6ZUGJ8qXF5Z2cVCrbAG97Oo8GUO6YvyWZMu8jhk6rhDdU1/EnHKwQ+9TaP0Wta0JeoAnbCWhvpRRJv4E16tjGDE89aQ/KXl/U6Gp1rTmyN8TpcPVG1jaO4DJXdnG+VHQVVWptJ4finvbBJ+0vXwp/7kuQg771+uU8+Fp78Ua1C6SHkqGJwgv0YT2bWYS9Kmb7K91aJT8xDpg==
ARC-Message-Signature: i=1; a=rsa-sha256; d=simplelists.com; s=arc1;
	t=1706709541; c=relaxed/simple;
	bh=U2THn2dNh44TxwEg47AMtCym+h/Jyr5rzBrqpuUldO4=;
	h=Message-ID:Date:Subject:To:From; b=a5SYJBN0RyM1pM+280jhewUH0plASlR0QYxcJ6Fzfqf60dS/KdtBaA9ec5VJj8+gQcdpnHNPHQiGyhQLcuZGbh8sGjUY5jN29t9MM6EfedKJbsK3Q57uUmgjE+TVOlIa56J72WejTlqVXZ0wx+qVathPyOsmRSb+lKbW80L2n+kr9aTfJ9i6TTKvypDpg9VIMyFa1leZhxQjUldl48jk3fg+7rFlBY/srUwP3L5yRKt0DYPWvSDtgbn8m5FQ8DMbbJAe4BJ3Nh5KkoGSvPeE2vuaSdP1ckmO76K82NRZLFn3WPC2aLnRoivONcmSmveTPjYD2D1KoFBIVvfRYlsEzw==
ARC-Authentication-Results: i=1; simplelists.com
[...]

Regards,
--Jered



----- On Jan 31, 2024, at 8:58 AM, Andrew Beverley andy@xxxxxxxxxxx wrote:

> On 31/01/2024 13:44, Jered Floyd wrote:
>> 
>> To the original question, at least, my inbound verification (with
>> Rspamd) does not validate the ARC-Seal from this list.  From my
>> previous message via the mailing list headers:
> 
> Could it be related to this PR which I have just opened?
> 
> https://github.com/trusteddomainproject/OpenARC/pull/167
> 
> Looking at the headers in the list email I have received, there are 2
> ARC-Seals, so the 2nd one (added by the list) may be computed incorrectly.
> 
> Andy