QSB mails from qubes-os.org failed domain authentication

Feedback
1

On my ProtonMail account, I’m getting a warning that the QSB mails could be spoofed, I assume this has to do with the mail failing the DMARC check

qubes-mail
qubes-mail872×178 8.93 KB

1 Like
2

FYI @marmarek

1 Like
3

The recent email " Qubes OS 4.3.0 has been released!" that was sent from a qubes-os.org email address still triggers a phising warning, because of DMARC failing. Would it be possible to fix this?

3 Likes
4

Pinging @marmarek

5

This looks to be caused by google groups adding the usual footer (You received this message because...), which invalidates messages signature in the headers. And similarly for the subject header - added prefix about the mailing list name. Mails from qubes-os.org domain have DKIM signature which covers also message body, so any modification there invalidates it. There is no possibility to disable that footer added by the mailing list…
There is also signature added by the mailing list itself, and that one is correct, but it appears proton mail doesn’t care…