Skip to content

[Draft] Authenticated Received Chain - ARC-sealing#31

Draft
agrinchenko wants to merge 105 commits intoapache:masterfrom
agrinchenko:master
Draft

[Draft] Authenticated Received Chain - ARC-sealing#31
agrinchenko wants to merge 105 commits intoapache:masterfrom
agrinchenko:master

Conversation

@agrinchenko
Copy link
Copy Markdown

Draft for ARC-sealing for review/comments/feedback. Work in progress.

mbaechler and others added 30 commits July 5, 2019 09:25
Fix FWS is not trimmed correctly
Following alphabetical order with groupId > artifactId
The JDKIM mailet has been moved into James server project
After removing the mailet (been moved to James), those libs are not necessary anymore.
@chibenwa
Copy link
Copy Markdown
Contributor

I have limited bandwith because of over-committing on another project.

I will take time for a complete review of this work this weekend.

@agrinchenko
Copy link
Copy Markdown
Author

Thanks, Benoit! No rush..

Comment thread arc/src/main/java/org/apache/james/arc/ArcValidationResult.java
Copy link
Copy Markdown
Contributor

@chibenwa chibenwa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I do think we could benefit from updating the documentation (src/site ?) for mentionning arc and dkim support + giving some little code examples.

I (tried to) refrain from doing too much code style related comments but I'd be happy, if you accept, to propose you a changeset to polish a bit this work (i'd PR your branch).

Comment thread arc/src/main/java/org/apache/james/arc/AuthResultsBuilder.java Outdated
Comment thread arc/src/main/java/org/apache/james/arc/AuthResultsBuilder.java Outdated
Comment thread dmarc/src/main/java/org/apache/james/dmarc/DMARCVerifier.java Outdated
Comment thread dmarc/src/main/java/org/apache/james/dmarc/DMARCVerifier.java Outdated
Comment thread dmarc/src/main/java/org/apache/james/dmarc/DMARCVerifier.java Outdated
Comment thread dmarc/src/main/java/org/apache/james/dmarc/DMARCVerifier.java Outdated
Comment thread arc/src/main/java/org/apache/james/arc/ArcSignatureRecordImpl.java
Comment thread arc/src/main/java/org/apache/james/arc/ArcSignatureRecordImpl.java Outdated
Comment thread dmarc/src/main/java/org/apache/james/dmarc/PublicSuffixList.java Outdated
Comment thread dmarc/src/main/java/org/apache/james/dmarc/PublicSuffixList.java Outdated
agrinchenko and others added 6 commits November 4, 2025 11:09
- Added ARC validation outcome with details on the failure
- Refactored logic such as `computeBTag` into separate methods
- Added hard fail whenever multiple From headers detected
- Rewrote tag extraction logic to do it all in one pass for efficiency
- Simplified getTimeMeasure to use standard Java
- Removed unnecessary Overrides
Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.26.0 to 3.27.7.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.26.0...assertj-build-3.27.7)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Removed typos
chibenwa

This comment was marked as outdated.

@chibenwa
Copy link
Copy Markdown
Contributor

Last comnit in the README is nice.

I'll commit to do a review, likely next weekend. We shalll eventually merge this work upstream in james-jdkim.

@agrinchenko
Copy link
Copy Markdown
Author

Last comnit in the README is nice.

I'll commit to do a review, likely next weekend. We shalll eventually merge this work upstream in james-jdkim.

Thanks! Sorry for the delays; I've been going through some changes lately, but all is good now. Waiting on your review.

@ieugen ieugen changed the title First commit [Draft] Authenticated Received Chain - ARC-sealing Mar 30, 2026
…chain structure is invalid. Also add cv_fail_i1_as_pass and cv_fail_i1_as_cv_fail tests: assert cv=fail when ARC-Seal cv= is invalid on first hop
… Also add cv_pass_i2..i5 and cv_pass_i2_1_ams1_invalid tests
- Add ValiMail-derived AMS tag format validation coverage for whitespace
  around separators and trailing semicolons. Add a duplicate
- ARC-Message-Signature i=1 ordering variant to ensure duplicate AMS
  instances are rejected regardless of header order.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants