We use Mimecast, but I think the behavior can be replicated across different email gateway platforms. The issue is that when Mimecast "explodes" message contents to scan for spam, etc., the DKIM signature is broken after repackaging. Mimecast will sh...