Comment

Comment by midmagico

Most people have no way to more-deeply authenticate those emails because you didn't provide headers. Many people, myself included, would love some way to better-rule-out whether parts of the messages had been elided, for example. A DKIM signature would have been a perfect integrity check of the message. It's just good protocol.

As a result of timestamping emails with their DKIM into Bitcoin, now even rotated, broken, or released keys can be used to partially authenticate e.g. Google messages. You can see this for example in this project here:

https://github.com/robertdavidgraham/hunter-dkim

And in particular, here:

https://github.com/robertdavidgraham/hunter-dkim/pull/5

So you see, even historical DKIM signatures can act as strong authentication.

parent midmagico 2 years ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton