This is a clever way of circumventing DKIM but using l= has always been a bad idea, and short expiry a good idea, and over signing critical headers (like Content-Type) essential.