Skip to main content

Which headers should be signed?

You should sign:

From

To

Subject

Date

Message ID

And any header that your system generates consistently.

Never sign headers that may change such as Received.