diff --git a/towncrier/newsfragments/3758.bugfix b/towncrier/newsfragments/3758.bugfix
new file mode 100644
index 00000000..5d38b191
--- /dev/null
+++ b/towncrier/newsfragments/3758.bugfix
@@ -0,0 +1 @@
+domain name of an IDN domain in the DKIM signature needs to follow RFC6376; puny encoding the domain name when rspamd accesses the vault;