From c84499adcd5775f4b34c212e56c3de0a9e15eff8 Mon Sep 17 00:00:00 2001
From: bwarsaw <>
Date: Mon, 12 Sep 2005 21:54:59 +0000
Subject: SF patch #1287546 to remove DomainKey (and similar) headers.

---
 Mailman/Handlers/Cleanse.py | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/Mailman/Handlers/Cleanse.py b/Mailman/Handlers/Cleanse.py
index 65c5df69..1f6bcb6f 100644
--- a/Mailman/Handlers/Cleanse.py
+++ b/Mailman/Handlers/Cleanse.py
@@ -1,4 +1,4 @@
-# Copyright (C) 1998-2003 by the Free Software Foundation, Inc.
+# Copyright (C) 1998-2005 by the Free Software Foundation, Inc.
 #
 # This program is free software; you can redistribute it and/or
 # modify it under the terms of the GNU General Public License
@@ -47,3 +47,12 @@ def process(mlist, msg, msgdata):
     del msg['x-confirm-reading-to']
     # Pegasus mail uses this one... sigh
     del msg['x-pmrqc']
+    # Remove any "DomainKeys" (or similar) header lines.  The values contained
+    # in these header lines are intended to be used by the recipient to detect
+    # forgery or tampering in transit, and the modifications made by Mailman
+    # to the headers and body of the message will cause these keys to appear
+    # invalid.  Removing them will at least avoid this misleading result, and
+    # it will also give the MTA the opportunity to regenerate valid keys
+    # originating at the Mailman server for the outgoing message.
+    del msg['domainkey-signature']
+    del msg['dkim-signature']
-- 
cgit v1.2.3