Why does header re-ordering sometimes break DKIM?

Because DKIM signs specific headers in a specific order. If a mail system rearranges them and your canonicalization is too strict, the signature breaks.

Relaxed canonicalization helps prevent this.

Was this answer helpful?

Thanks for your feedback!