DomainKeys Identified Mail (DKIM) defines a simple, low cost and effective mechanism by which cryptographic signatures can be applied to email messages, to demonstrate that the sender of the message was authorized to use a given email address. Message recipients can verify the signature by querying the signer’s domain directly to determine whether the key that was used to sign the message was authorized by that domain for that address. This confirms that the message was sent by a party authorized to use the signer’s email address.
The purpose of this list is to share the current efforts and results of deploying and testing DKIM.
... I haven't done much analysis of how Yahoo! reports DKIM failures, but it looks like they aren't as specific about the type of failure. "Bad sig" could be
What's interesting it's that the header from Yahoo says: Authentication-Results: mta1068.mail.sk1.yahoo.com from=xxxxxxxx.com; domainkeys=neutral (no sig);
Hi, The important part of the message is where it says (body hash did not verify). That means that the bh= value in the signature did not match the hashed,
... The above line defines a record at dkim1.gnvfc.net. You want it to be at dkim1._domainkey.gnvfc.net. So change the "dkim1" above to "dkim1._domainkey".