DKIM: tighter checking while parsing signature headers. Bug 2217