[opendmarc-users] Can I tell why a specific message failed?

[Benny Pedersen]

On 26. aug. 2014 10.47.36 "Dan Mahoney, System Admin" 
<danm at prime.gushi.org> wrote:

> Authentication-Results: prime.gushi.org; dkim=pass
>          reason="1024-bit key; unprotected key"
>          header.d=amazonses.com header.i=@amazonses.com header.b=IILVBN7v;
>          dkim-adsp=pass
>
> Any ideas?

dig +trace amazon.com

Missing ds rr gives unprotected key, but dkim works with signing domain 
amazonses.com none of them is dnssec protected