aboutsummaryrefslogtreecommitdiffstats
path: root/doc/aerc-config.5.scd
diff options
context:
space:
mode:
authorKoni Marti <koni.marti@gmail.com>2022-05-30 00:20:41 +0200
committerRobin Jarry <robin@jarry.cc>2022-06-09 09:42:23 +0200
commit83e0e2638df9da0801af7ad35058938dc8eb1cdc (patch)
tree6396833487c13e6cffbebdd43112779684bdcc60 /doc/aerc-config.5.scd
parent115447e57f015b1805d2d58d1ae46beaff2299e5 (diff)
downloadaerc-83e0e2638df9da0801af7ad35058938dc8eb1cdc.tar.gz
msgviewer: parse and display authentication results
Parse the Authentication-Results header and display it in the message viewer (not enabled by default). DKIM, SPF and DMARC authentication methods are supported. Implement recommendation from RFC 7601 Sec 7.1 to have an explicit list of trustworthy hostnames before displaying the authentication results. Be aware that the authentication headers can be forged. To display the results for a specific authentication method, add the corresponding name to the layout of headers in the viewer section of aerc.conf, e.g. to display all three, use: header-layout = From|To,Cc|Bcc,Date,Subject,DKIM|SPF|DMARC More information will be displayed when "+" is appended to the authentication method name, e.g. DKIM+ or SPF+ or DMARC+. Also, add the trustworthy hosts per account with the trusted-authres parameter, e.g. trusted-authres = * to trust every host or use regular expressions for a finer control. Multiple hosts can be entered as a comma-separated list. Authentication results will only be displayed when the host is listed in the trusted-authres list. Link: https://datatracker.ietf.org/doc/html/rfc7601 Signed-off-by: Koni Marti <koni.marti@gmail.com> Tested-by: Tim Culverhouse <tim@timculverhouse.com> Acked-by: Robin Jarry <robin@jarry.cc>
Diffstat (limited to 'doc/aerc-config.5.scd')
-rw-r--r--doc/aerc-config.5.scd11
1 files changed, 11 insertions, 0 deletions
diff --git a/doc/aerc-config.5.scd b/doc/aerc-config.5.scd
index b7fba82d..15c6ca3a 100644
--- a/doc/aerc-config.5.scd
+++ b/doc/aerc-config.5.scd
@@ -383,6 +383,11 @@ These options are configured in the *[viewer]* section of aerc.conf.
Rows will be hidden if none of their specified headers are present in the
message.
+ Authentication information from the Authentication-Results header can be
+ displayed by adding DKIM, SPF or DMARC. To show more information
+ than just the authentication result, append a plus sign (+) to the header name
+ (e.g. DKIM+).
+
Default: From|To,Cc|Bcc,Date,Subject
*show-headers*
@@ -649,6 +654,12 @@ Note that many of these configuration options are written for you, such as
signature to be added to emails sent from this account. If the command
fails then *signature-file* is used instead.
+*trusted-authres*
+ Comma-separated list of trustworthy hostnames from which the
+ Authentication Results header will be displayed. Entries can be regular
+ expressions. If you want to trust any host (e.g. for debugging),
+ use the wildcard \*.
+
# BINDS.CONF
This file is used for configuring keybindings used in the aerc interactive