4 ms·
Wouldn't DKIM verification require having the public key of Gmail from 2014 on hand? I looked up some old 2014 era emails I got from gmail and it looks like the
by Felz 6y ago
Wouldn't DKIM verification require having the public key of Gmail from 2014 on hand? I looked up some old 2014 era emails I got from gmail and it looks like they were using the "20120113" selector at the time, which is no longer available through DNS query.
- rmrfstar 6y agoThere are historical DNS data vendors, as there are historical WHOIS data vendors. Also, Google would almost certainly respond to a journalistic inquiry about a cryptographic signature. Follow-up of this kind is what we should expect from journalists.
- chjj 6y agoAfter some googling, I managed to find the public key corresponding to that selector in a github repo: https://github.com/PaloAltoNetworks/aws-elb-autoscaling/blob/master/Version-2.0/lambda-docs/cft_code/dnslib/test/20120113._domainkey.gmail.com.-TXT https://github.com/PaloAltoNetworks/aws-elb-autoscaling/blob... edit: Seems to be an old test vector for dnslib: https://github.com/paulc/dnslib/blob/d806cfc828d6bbae45c9b4cb7d5e32818aa1f547/dnslib/test/20120113._domainkey.gmail.com.-TXT https://github.com/paulc/dnslib/blob/d806cfc828d6bbae45c9b4c...