Be careful ( feddit.uk )

LinearArray , 23 days ago

It probably isn't them.

Australis13 , 24 days ago

I don't think this is from Google. Note how the from address is "via" something? None of the official Google Security Alerts I have received have that.

dave OP , 24 days ago

Yeah, it’s to my recovery account. But DKIM is set up on that account and fetched via google. Probably some kind of weird back emf somewhere.

Kit , 24 days ago

Does it actually show DKIM failing in the headers? I find it hard to believe that Google would allow their DKIM to be misconfigured, and if they did there would be thousands of people experiencing this behavior and posting about it.

dave OP , 24 days ago

Yes—this is what I see. But I don't work in this area, so still not sure if it's google or my domain that's borked, and quite frankly... All I used to test my domain was MXToolbox, and that reported everything configured correctly.

https://feddit.uk/pictrs/image/6b8d4830-5625-4231-bacd-1162e94c9227.png

https://feddit.uk/pictrs/image/0329e57e-23e3-4e50-a901-99b644881670.png

user224 , 24 days ago

Or it actually isn't from them.

dave OP , 24 days ago

True, but in this case it was. And I usually get two of them—one to my main account and one to my ‘recovery’ account and one of them ends up in spam.

From the google ‘Meh, it kinda works’ School of Design.

Starbuck , 24 days ago

What does that via say? That looks like it was forwarded or something. IDK, it looks like Google correctly identified something fishy about that email, and they don’t exempt their own emails from the rules (which is good).