# Unsubscription test fails
**URL:** https://forum.mautic.org/t/unsubscription-test-fails/30648
**Category:** Product Support
**Created:** [January 24, 2024, 5:03pm UTC](https://forum.mautic.org/t/unsubscription-test-fails/30648 "2024-01-24T17:03:38Z")
**Posts on this page:** 2
**Page:** 2
### Author:  [@steffenabel](https://forum.mautic.org/u/steffenabel)
#### Post date: [April 8, 2024, 6:43pm UTC](https://forum.mautic.org/t/unsubscription-test-fails/30648/22 "2024-04-08T18:43:05Z")
Ok, but a hint in the docs that this is an issue would be great. Would probably save others lots of time.
---
### Author:  [@andrass](https://forum.mautic.org/u/andrass)
#### Post date: [May 3, 2024, 9:38am UTC](https://forum.mautic.org/t/unsubscription-test-fails/30648/23 "2024-05-03T09:38:59Z")
Salut Carlos, sorry for my very late reply.
In /etc/opendkim.conf, SignHeaders must include List-Unsubscribe and List-Unsubscribe-Post, otherwise they won’t be signed and authenticity not proved.
As simple as that.
```auto
# Always oversign From (sign using actual From and a null From to prevent
# malicious signatures header fields (From and/or others) between the signer
# and the verifier. From is oversigned by default in the Debian pacakge
# because it is often the identity key used by reputation systems and thus
# somewhat security sensitive.
SignHeaders From,To,List-Unsubscribe,List-Unsubscribe-Post
OversignHeaders From
```
[Previous page](https://forum.mautic.org/t/unsubscription-test-fails/30648.md?page=1)