-
Notifications
You must be signed in to change notification settings - Fork 36
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
EOP-281: OpenARC module and APIs #782
base: main
Are you sure you want to change the base?
Conversation
✅ Deploy Preview for support-docs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
it before and what the message's authentication assessment was at each step in the handling flow. | ||
|
||
The openarc module add ARC capability to Momentum. It provides Lua APIs for | ||
ARC validation on a received email, and ARC siging and sealing on an outgoing email. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
signing
This function validates the ARC set headers contained in the input message. The validation result | ||
will be stored as string value (`none` or `pass` or `fail`) in the `ec_message`'s context variable | ||
of `arc_cv`. A caller can take actions (e.g. disposition of the message) based on the validation | ||
result. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm guessing "none" means no ARC headers rather than the status of "cv=none" which is normal for just one ARC header set?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
none
means cv=none
in ARC-Seal, also means no ARC headers.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
(nit) seems like if a single set of ARC headers checks out, the result should be 'pass', not 'none.
It guarantees that operations implemented in this hook will happen after the operations done in | ||
`final_validtion`. | ||
No any message modification expected after this stage. | ||
To avoid undefined race between multiple implementations of the same hook, you shall only have up |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'd suggest "ordering" rather than "race" and "you should have at most one"
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
What Changed
How To Test or Verify
PR Checklist
Below are some checklists to follow for the correct procedure in different circumstance. The first list ("All PRs Checklist") should be followed for ALL PRs. The next 2 are additive to this list depending on what type of PR you are using.
For example: If you are submitting a content change to one of the support documents, your checklist would include the:
If you are submitting a feature addition, enhancement, or bug fix, your checklist would include the:
All PRs Checklist
team-FE
orteam-SAZ
)Content Changes Checklist
examples/article.md
in the root of the project directory and on the momentum doc's preface articleDevelopment Changes Checklist (some checks are automatic github actions and will not be listed here. ie. "all tests pass")
cypress/
directory in the root of the project