3 ms·
Abusing CT log is unethical. For practical purposes DKIM signatures in emails would do the trick. Write an email to yourself, or to someone you trust, its DKI
by sam_lowry_ 4y ago
Abusing CT log is unethical.
For practical purposes DKIM signatures in emails would do the trick.
Write an email to yourself, or to someone you trust, its DKIM will include the timestamp and it can be verified publicly.
- redfast00 4y agoThe DKIM idea will not work: some email servers intentionally publish their expired DKIM keys to avoid people leaking mails (https://blog.cryptographyengineering.com/2020/11/16/ok-google-please-publish-your-dkim-secret-keys/ https://blog.cryptographyengineering.com/2020/11/16/ok-googl...)
- lupire 4y agoA cleaner, simper solution to that is for email clients to delete the DKIM info immediately upon receipt.
- sam_lowry_ 4y agoGoogle does not. In many ways, non-repudiation property of emails is a boon. We do not hear much about it, but I bet that many thousands of legal disputes are settled once people realize that their emails can be verified via DKIM signatures. The fact that it allows to verify the authenticity of leaked emails is only a small and not necessarily negative side-effect.
- IshKebab 4y agoI don't see why it matters. Sounds like they aren't going to be registering many domains. Looks like they register something like 4 domains a day, which is completely insignificant.