This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

DKIM Validation Fails

  • 5 ŋuɖoɖowo
  • 2 masɔmasɔ sia le wosi
  • 3 views
  • Nuɖoɖo mlɔetɔ christ1

more options

When using Thunderbird v52+, I continually get DKIM validation errors on the receiving end. All other clients are fine (whether they also send via IMAPS or client protocols).

The exact DKIM failure: dkim=neutral (body hash did not verify)

So, Thunderbird is doing something to the body to cause failures.

Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0

When using Thunderbird v52+, I continually get DKIM validation errors on the receiving end. All other clients are fine (whether they also send via IMAPS or client protocols). The exact DKIM failure: dkim=neutral (body hash did not verify) So, Thunderbird is doing something to the body to cause failures. Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0

All Replies (5)

more options

Presumably you did install an extension for DKIM validation. Check with the extension author.

more options

christ1 said

Presumably you did install an extension for DKIM validation. Check with the extension author.

No, no extensions are installed. DKIM is added by my relay agent.

more options
No, no extensions are installed. DKIM is added by my relay agent.

I don't understand this. Thunderbird does not support DKIM validation natively, it needs an add-on for this. You implied you're doing DKIM validation using Thunderbird, but how? What is your 'relay agent'?

more options

christ1 said

No, no extensions are installed. DKIM is added by my relay agent.

I don't understand this. Thunderbird does not support DKIM validation natively, it needs an add-on for this. You implied you're doing DKIM validation using Thunderbird, but how? What is your 'relay agent'?

No, I did not imply that Thunderbird did the validation. What I said was the result of the validation is always "Body hash did not verify" when sending from Thunderbird, and that all other mail clients are fine.

DynU

more options
Thunderbird is doing something to the body to cause failures.

No, the DKIM signature is added by your relay agent *after* the message has been sent by Thunderbird. So this is not a Thunderbird problem.

My best guess is your relay agent is the problem. Note, the elements you (or your email provider) decided to include in the DKIM signing process must remain unchanged in transit, or the DKIM signature will fail authentication.