2 ms·

>> next, all email has to be cryptographically signed by the sending domain using public key encryption. (No more spam) How does this work? Would every email a

>> next, all email has to be cryptographically signed by the sending domain using public key encryption. (No more spam) How does this work? Would every email address need to get a public/private key? From where? Does someone get to control who can use email? How much does it cost? Do the certs expire? How do we manage the system for billions of email addresses? I ask this with genuine interest - I'm not sure how a cert-required email system would work - or how it would help with spam...

mikewarot 5y ago
If I wanted to send email from mike@warot.com, I'd simply use my DNS specified MX server, and it would sign the outbound email (I'd have to log in, for the email to be forwarded). Any forwarding server could check the signature against the MX specified server and get the public key for the domain. If the signature didn't match, the email would get rejected. We'd have to agree on standard protocols, but all domains would manage their own keys, nothing would be centralized past the already centralized DNS system.