4 ms·
The DKIM idea will not work: some email servers intentionally publish their expired DKIM keys to avoid people leaking mails (https://blog.cryptographyengineerin
by redfast00 4y ago
The DKIM idea will not work: some email servers intentionally publish their expired DKIM keys to avoid people leaking mails (https://blog.cryptographyengineering.com/2020/11/16/ok-google-please-publish-your-dkim-secret-keys/ https://blog.cryptographyengineering.com/2020/11/16/ok-googl...)
- lupire 4y agoA cleaner, simper solution to that is for email clients to delete the DKIM info immediately upon receipt.
- sam_lowry_ 4y agoGoogle does not. In many ways, non-repudiation property of emails is a boon. We do not hear much about it, but I bet that many thousands of legal disputes are settled once people realize that their emails can be verified via DKIM signatures. The fact that it allows to verify the authenticity of leaked emails is only a small and not necessarily negative side-effect.