2 ms·
Depends. I once was an expert witness against someone who “lost” the original email they doctored and printed out. DKIM signatures and spam prevention proved my
by withinboredom 4y ago
Depends. I once was an expert witness against someone who “lost” the original email they doctored and printed out. DKIM signatures and spam prevention proved my client had an original, undoctored email saying something totally different from the other person.
That was fun. But generally, both parties have to accept the screenshot you have is authentic, otherwise you just have some text on a piece of paper which might convince a jury.
- lxgr 4y agoInteresting! But that's precisely my point: iMessage does not have anything comparable to DKIM, as far as I understand (it's using ECDSA internally for authentication, but as far as I know, signatures are not stored to the persistent message database locally). A copy of the local message database "without headers" is no better or worse than a screenshot of a message contained in it. Apple might be able to provide the original ECDSA signature from their server-side logs, but even there, nothing changes with editable/deletable messages: If that capability exists, it will continue existing (unless Apple somehow starts dropping traffic logs specifically for edited/deleted messages).