Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

Status Assessment
Workspace Domino
Categories Administration
Created by Guest
Created on Feb 26, 2024

Implement DKIM Oversigning

I've noticed in some of my DMARC reports that emails not sent by our server have passed DKIM. Researching this, it appears that legitimate emails are intercepted and then resent using either headers not included in the original email (e.g., CC, BCC, etc.) or including duplicate headers.

To prevent this sort of attack, all headers should be included in the DKIM signature even if they are not used in the email. Additionally, some sites recommend adding duplicate headers (e.g., h=To:To:Subject:Subject:CC:CC etc.) to the DKIM signature to prevent the addition of duplicate headers at a later date.

  • Attach files