If that's the case, it seems like someone should be informing Facebook that their DKIM signing keys have been compromised. The impact of that would be much wors

If that's the case, it seems like someone should be informing Facebook that their DKIM signing keys have been compromised. The impact of that would be much worse than just a forged .eml file sent to a journalist.