EML — Three Authentication-Results Headers From Three Hops
A mailing-list post carrying three Authentication-Results headers stamped by three different hosts, where DKIM passed upstream and failed at the final hop after the list rewrote the message. Only the topmost header, from the receiving host, may be trusted.
Return-Path: <maya@brightside.example>
Received: from list.example (list.example [203.0.113.40])
by mx1.meridiansupply.example with ESMTPS id p7aa03;
Tue, 17 Feb 2026 08:15:03 -0800
Authentication-Results: mx1.meridiansupply.example;
spf=pass smtp.mailfrom=list.example;
dkim=fail header.d=brightside.example;
dmarc=fail (p=NONE) header.from=brightside.example
Received: from mta.brightside.example (mta.brightside.example [203.0.113.7])
by list.example with ESMTPS id p7aa03b;
Tue, 17 Feb 2026 08:14:41 -0800
Authentication-Results: list.example;
spf=pass smtp.mailfrom=brightside.example;
dkim=pass header.d=brightside.example header.s=feb2026;
dmarc=pass (p=NONE) header.from=brightside.example
Authentication-Results: mta.brightside.example; auth=pass (PLAIN) smtp.auth=maya@brightside.example
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=brightside.example; s=feb2026; t=1771200000;
h=from:to:subject:date:message-id;
bh=SAMPLEbodyHashBase64Placeholder0000000000000=;
b=SAMPLEsignatureBase64Placeholder00000000000000000000000000000000/NOTREAL=
From: Maya Chen <maya@brightside.example>
To: Sam Rivera <sam@meridiansupply.example>
Subject: Mailing-list post seen by three hops
Date: Tue, 17 Feb 2026 08:15:00 -0800
Message-ID: <p7-auth-hops@brightside.example>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
The authentication headers are the fixture; the body is filler.
Every DKIM and ARC value in this message is a visible SAMPLE placeholder
and will not verify against any key.
Specifications
- Wave
- p7
- Seed
- 20260807
- Auth Results Headers
- 3
- Received Headers
- 2
- Nearest Hop
- mx1.meridiansupply.example
- Nearest Dkim
- fail
- Upstream Dkim
- pass
- Line Endings
- CRLF (RFC 5322)
Testing contract
Expected to pass- Scenario
- Select the authoritative Authentication-Results among three headers added by different hosts along the delivery path.
- Expected result
- The header whose authserv-id is mx1.meridiansupply.example is used (dkim=fail); the upstream dkim=pass from list.example is not treated as the verdict.
What is a .eml file?
An EML file is a single email message stored in the RFC 822 / MIME format — plain-text headers (From, To, Subject, Date, Message-ID) followed by the body, which may be plain text, HTML, or a multipart structure with alternative bodies and file attachments encoded in base64.
How to use this file
Use an example EML to test email header parsing, MIME decoding, HTML-part handling, attachment extraction, and EML-to-other-format conversion.
How to use this file for testing
“EML — Three Authentication-Results Headers From Three Hops” is a deterministic Novus Examples fixture for Email parsing, Metadata testing. Standards-compliant RFC 822 messages — plain, multipart text+HTML, and with an attachment — plus an MBOX mailbox, for testing header parsing, MIME decoding, attachment extraction, and mailbox splitting.
Documented properties for this file: seed 20260807 · CRLF (RFC 5322). Compare results against paired or grouped companions on this page when present (clean↔damaged, searchable↔scanned, or format twins) so scores stay reproducible across runs.
Download the file once, keep the path stable in CI or local scripts, and treat the spec table as the contract: dimensions, seeds, field lists, and roles are intentional. Corrupt or invalid samples are labelled as such — expect parsers to fail loudly rather than silently accept them.
Email fixtures use fixed dates, message IDs, and MIME boundaries so runs are reproducible, and every address is fictional. Test header parsing, MIME decoding, attachment extraction, and EML/MBOX conversion against the documented structure.
Code examples
from email import policy
from email.parser import BytesParser
msg = BytesParser(policy=policy.default).parse(open("p7-auth-multiple-hops.eml", "rb"))
print(msg["subject"], msg["from"])Related files
- emlDKIM / SPF Annotated Email (EML)An email annotated with DKIM-Signature, Received-SPF, and Authentication-Results headers (all reporting pass) — for testing email-authentication header parsing. The DKIM signature value is a sample placeholder, not real cryptography.
- emlBounce / Non-Delivery Report (EML)A bounce / non-delivery report (NDR) — a multipart/report message with a human-readable notice, a message/delivery-status part, and the original headers — for testing bounce parsing and delivery-status extraction.
- emlEmail with Attachment (EML)A multipart/mixed email with a base64-encoded CSV file attachment — for testing attachment detection, decoding, and extraction from an EML message.
- emlEML — 1,024-Octet Header Line With No Fold PointA single header whose value is one 1,001-character token with no whitespace, making the line 1,024 octets — past the 998-octet limit RFC 5322 sets and impossible to fold. Fixed-size line buffers truncate here, and the truncation is silent.
- emlEML — Adjacent Encoded-Words (Separator Must Disappear)A Subject split mid-word across two adjacent encoded-words. RFC 2047 requires the linear whitespace between them to be discarded, so the correct result is one word; a decoder that keeps the space renders a split that reads as a typo.
- emlEML — Attachment With No Filename At AllAn attachment with a bare Content-Disposition: attachment and no name in either header. A client has to invent a filename, and the extension it invents decides whether the saved file opens as a spreadsheet or as unknown binary.
Generated by generation/email_p7.py. Free for any use, no attribution required — license.