3 ms·
Assuming you mean identity verification is handled with GPG keys, nobody actually uses that in practice. Even the people that use Usenet today mostly don't. Em
by Karrot_Kream 4y ago
Assuming you mean identity verification is handled with GPG keys, nobody actually uses that in practice. Even the people that use Usenet today mostly don't.
Email identity is handled de facto by a web of trust anchored by the big domains with no possibility of creating a new trust anchor. You're either managed by Google, Microsoft, or Apple and inherit their trust or you play endless games to not get your mails blocked by default. It's a sad world and didn't need to be this way, but there's no real urge to fix things because the only people who are clamoring to fix email are people who want to encourage folks to use niche experiences like mutt and PRs by mail while the incumbents like Google have no incentive to adopt decentralized trust.
- Beltalowda 4y agoMostly meant SPF/DKIM to verify the sender is authorized to send emails for a particular domain. Verifying that "it is actually the person Karrot_Kream who wrote that email" is harder; but I don't think you can blame that on the SMTP protocol.