Class LocalSenderAuthenticationReading
- Namespace
- MailFathom.Domain.Emails.Authentication
- Assembly
- MailFathom.Domain.dll
Reads the verdict a message's own DKIM signatures support, where no trusted server said anything.
public static class LocalSenderAuthenticationReading- Inheritance
-
LocalSenderAuthenticationReading
- Inherited Members
Remarks
It is the fallback half of SenderAuthenticationReading and deliberately mirrors it: the verifying happens outside — one signature at a time, against a key its domain publishes — and what to make of the results is decided here, where it is unit-testable without a network. The two readings never both run on one message, because an account whose receiving server writes the header goes on believing that server.
A locally reached verdict is narrower than a server-written one and the narrowing is structural rather than incidental. SPF authenticates an envelope sender against a connecting address and after delivery there is neither, so no SPF identity is ever produced here; a DMARC result needs the displayed domain's published policy and its alignment mode, so none is reported either. What is left is the one check the stored bytes still answer, and it is the stronger of the two: a key the signing domain publishes signed exactly these octets.
The author conclusion follows from the same rule the trusted reading uses and is neither relaxed nor tightened for running here. An author is established by a verified signature whose domain is the displayed one or is one within the other at a label boundary, which is a delegation in the naming tree rather than a policy — and a policy is what MailFathom still has none of, so a signer outside that branch establishes nothing.
Fields
- MaximumVerifiedSignaturesPerMessage
How many of a message's DKIM signatures are verified before the rest are passed over.
Methods
- Read(IReadOnlyList<SenderDomain>, bool, string?)
Reads the verdict one message's locally checked signatures support.