NOTES |
The policy results described above correspond to the draft DKIM
sender signing practises policy procedures. Detailed descriptions, with
the algorithm steps indicated in square brackets, are included here.
- DKIM_PRESULT_NONE is returned if no policy check has been done
yet for the message.
- DKIM_PRESULT_NXDOMAIN is returned if the policy check was done
and it was discovered that the sender's domain does not exist.
- DKIM_PRESULT_UNKNOWN is returned if the policy check was done
and the policy was found to be "unknown" which allows no conclusions
about suspicious vs. non-suspicious messages.
- DKIM_PRESULT_TOPLEVEL is returned if the policy check has been
done but was not found and a parent domain check is not prudent because
the parent domain appears to be a top-level domain.
- DKIM_PRESULT_PARENTOK is returned if the policy check has been
done but no policy was found, but a parent domain policy check succeeded.
- DKIM_PRESULT_TESTFLAG is returned if the policy check has been
done and the returned policy had the "test" flag set. This is somewhat
redundant to the result returned by dkim_policy() but is
included here as well for completeness.
- DKIM_PRESULT_VALIDOSIG is returned if the policy check has been
done and it was found that the message had a valid originator signature.
- DKIM_PRESULT_ALLVALIDSIG is returned if the policy check has been
done and it was found that the sender's policy is "all" and at least one
valid signature was found on the message.
- DKIM_PRESULT_POLICYERROR is returned if the policy check has been
done and it was determined that the rules stated by the policy failed to
indicate approval of the message.
|