On Thu, 7 Aug 2025 17:09:24 +0200 Aleksandr Nogikh wrote:

quoted

One more thing, would it be possible to add / correct the DKIM on these
messages? Looks like when our bots load the syzbot ci emails from lore
the DKIM verification fails. I see a X-Google-DKIM-Signature: header,
but no real DKIM-Signature:  

Thanks for letting us know!
Do these bots also face DKIM verification issues with regular syzbot
emails? We send them absolutely the same way, so the problem must
affect all reports.

I haven't checked, TBH, we don't have any automation for normal
reports :( For the CI reports I was trying to hook them up to
some actions, kick the patch out of our test branch unless human
confirms that the report is a false positive.

We use the GAE Mail API, and its documentation[1] says that it signs
emails with DKIM only if a custom domain is configured. Since we send
from the default GAE domain, this would explain the verification
failures.

We'll explore the ways to fix this.

[1] https://cloud.google.com/appengine/docs/standard/services/mail?tab=go#authentication_with_domainkeys_identified_mail_dkim