3 ms·
Gmail stores the DKIM check result in the header of the email. For a more exhaustive system, one might store a DNSSEC result proving the key was valid. Though
by rocqua 9y ago
Gmail stores the DKIM check result in the header of the email.
For a more exhaustive system, one might store a DNSSEC result proving the key was valid. Though from my limited search, it seems DNSSEC does not sign a time-stamp.
- Boulth 9y ago> Gmail stores the DKIM check result in the header of the email. That's an interesting idea. Unfortunately it makes Google a trusted third party. And a printout of that email would be easy to fake. It would be nice if the report was signed by Google and timestamped (e.g. RFC 3161).