EmailDkimFailureReason

No failure.

The tag list is malformed or contains duplicate tags.

A required tag is missing or empty.

A tag value is not valid for its tag.

The v= version is not supported.

The a= algorithm is not supported.

The c= canonicalization is not supported.

The q= query methods do not include dns/txt.

rsa-sha1 signatures are refused per RFC 8301.

The h= list does not include From, or includes a header the signature type forbids.

The i= identity is not the d= domain or a subdomain of it.

The x= expiration time has passed.

The x= expiration is earlier than the t= timestamp.

The l= body length exceeds the canonical body.

The l= body length was refused by caller policy.

No key record was published for the selector.

The key lookup failed temporarily.

The key record is malformed, or more than one key record was returned.

The key record has an empty p= tag.

The key record k= type does not match the signature algorithm.

The key record h= list does not allow the signature hash.

The key record s= service types exclude email.

The key record t=s flag requires i= to use exactly the d= domain.

The public key is shorter than the configured minimum.

The public key data could not be decoded.

The computed body hash does not match bh=.

The signature does not match the signed header data.

The configured signature verifier does not implement the algorithm.

A configured resource limit was reached.