Body hash and selected headers
03A body hash is included in the signed DKIM header, which is itself included in the signature calculation.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 3.7 ↗
RFC 6376 · § 3.7EXAMPLE
3 / 3
03
Create signature
The signing key authenticates the combined selected input.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
bh= carries the canonicalized body hash.
- bh= carries the canonicalized body hash.
- h= identifies the signed header fields under the selection rules.
- Optional body-length signing has additional risks and does not protect unsigned appended data.
Examples are illustrative. Consult the linked RFC and its errata for implementation details.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy