@Nemo_bis: Could you elaborate why you consider this urgent (high priority)?

In T116805#1761599, @Aklapper wrote:

@Nemo_bis: Could you elaborate why you consider this urgent (high priority)?

All the DKIM tasks are, plus see blocked task.

if I'm reading exim's configuration right, whether to use dkim or not is remote_smtp_signed vs remote_smtp

# Route non-local domains (including +relay_domains) via DNS MX and A records
dnslookup:
        driver = dnslookup
        domains = ! +local_domains
        transport = ${if eq {$acl_m_relayed}{yes}{remote_smtp}{remote_smtp_signed}}
        ignore_target_hosts = <; 0.0.0.0 ; 127.0.0.0/8 ; 10/8 ; 172.16/12 ; 192.168/16
        cannot_route_message = Cannot route to remote domain $domain
        no_more

and acl_m_relayed is set in acl_check_rcpt

# Require recipient domain to be local, or a domain we relay for
require message = Relay not permitted
        domains = +local_domains : +relay_domains
        set acl_m_relayed = yes

and seems the reason why dkim isn't there, not sure how to best fix it though

In T116805#1852017, @fgiunchedi wrote:

if I'm reading exim's configuration right

For anybody else who wants to take a look:

https://phabricator.wikimedia.org/diffusion/OPUP/browse/production/templates/exim/exim4.conf.phab.erb

As of https://gmail.googleblog.com/2016/02/making-email-safer-for-you-posted-by.html Google is now identifying Phabricator emails as potentially dangerous since we don't have DKIM set up for it. See the user report at T144381 (which I can confirm in my gmail android app).

I've never seen this but I don't routinely use gmail for following phabricator. Is this really still an issue?

afaik the outbound email path was completely redone since this task was filed.

This is only a single datapoint but I noticed a Phab comment email notification from gerritbot was mistakenly marked as spam on Friday in my Gmail.

In T116805#4965322, @Niedzielski wrote:

This is only a single datapoint but I noticed a Phab comment email notification from gerritbot was mistakenly marked as spam on Friday in my Gmail.

@Niedzielski: That was probably T216714 instead

@Aklapper, , good to know. Thanks!

For reference, the DKIM result for the comment resolving this task is a pass:

Authentication-Results: mx1.riseup.net;
	dkim=pass (1024-bit key; unprotected) header.d=wikimedia.org header.i=@wikimedia.org header.b="S+9sQmfJ";
	dkim-atps=neutral