4 ms·
You can authenticate messages in a way that only the recipient can verify (Diffie-Hellman plus MAC).
by CodesInChaos 6y ago
You can authenticate messages in a way that only the recipient can verify (Diffie-Hellman plus MAC).
- arkadiyt 6y agoIf you had access to a public key for every email address then why stop at authentication - you could encrypt all email on the web. But we don't, so we can't.
- tomrod 6y agoMaybe we should.
- CodesInChaos 6y agoAuthentication in this context doesn't need to be end-to-end. Instead of a custom protocol, we could probably just use SSL client certificates authenticating the sending domain to achieve the same effect.