Roundcube Community Forum

 

DKIM validator plugin

Started by HQJaTu, June 08, 2026, 09:34:07 AM

Previous topic - Next topic

HQJaTu

It is a known fact, that all SMTP-traffic today must have valid digital signature in it. Most major email providers won't even process your mail without one and all of them will classify your precious as junk. So, must have DKIM.

Meanwhile I find it weird that mail client's don't display DKIM verification status as receiving SMTPd added to mail headers. Gmail kinda does, but you'll have to click to see the "original" mail. Outlook and such won't display any information. As a negative, iOS will display "sender verified" to an email having properly valid DMARC in it.

Complaining here about lack of features is an option. I chose the hard way: https://github.com/roundcube/roundcubemail/pull/10222

Now there is a DKIM validator plugin to parse mail headers and display the validation status against alleged sender domain.

Example:


Now it is pretty easy for end-user to determine if email sender is a forgery, valid or uncertain.

Any comments, feedback or improvement ideas are welcome.

HQJaTu

Improved the plugin:
  • Renamed into DKIM Info
  • When DKIM validation is green, removed the bar and made only a small check-mark to not consume space. Information is visible as tooltip.
  • Uncertain on validation failures are displayed as bar to bring attention to fact a possible forgery of sender information has been detected.

Any other suggestions?

alec

The icon looks out of place. How about putting it on the right (or left) of the Summary and Headers actions (in the same line). It could then have a "DKIM" label (in green).

HQJaTu

Quote from: alec on June 09, 2026, 07:20:28 AMThe icon looks out of place. How about putting it on the right (or left) of the Summary and Headers actions (in the same line). It could then have a "DKIM" label (in green).

Thanks! That's a really good idea.

In my defense: I'm a nerd. I do software. I don't do graphic design!  :)

HQJaTu

This is where I got the idea for this plugin. A screenshot taken from iPadOS making a bold and completely untrue statement.


I claim, that sender can be verified. That's why it has digital signature in it.

HQJaTu

Quote from: alec on June 09, 2026, 07:20:28 AMThe icon looks out of place. How about putting it on the right (or left) of the Summary and Headers actions (in the same line). It could then have a "DKIM" label (in green).

Something like this?