From 4d6919e54c432c46baebc9e3daf2b53f466ed28e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bojan=20=C4=8Cekrli=C4=87?= <bojan@cekrlic.com>
Date: Tue, 17 Sep 2019 09:31:42 +0200
Subject: [PATCH] Add additional headers to DKIM signature

By default OpenDKIM will sign just `From`, `To`, `Sender`,
`Subject` and `Date`.

It makes sense to also sign other headers (especially `Reply-To`)
to make sure nobody fiddles with the email.
---
 opendkim.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/opendkim.conf b/opendkim.conf
index 90fb3ea..c94fee0 100644
--- a/opendkim.conf
+++ b/opendkim.conf
@@ -19,3 +19,6 @@ SignatureAlgorithm      rsa-sha256
 
 UserID                  opendkim:opendkim
 Socket                  inet:8891@localhost
+
+SignHeaders             From,Sender,To,CC,Subject,Message-Id,Date,MIME-Version,Content-Type,Reply-To
+OversignHeaders         From,Sender,To,CC,Subject,Message-Id,Date,MIME-Version,Content-Type,Reply-To