4 ms·
DKIM helps for the headers the email provider chooses to sign (such as Subject), but does not attest as to the content of the message.
by dpifke 3y ago
DKIM helps for the headers the email provider chooses to sign (such as Subject), but does not attest as to the content of the message.
- IAmLiterallyAB 3y agoIncorrect, DKIM also signs the body of the message.
- willhackett 3y agoOnly from the mail server to the receiving mail server.
- dpifke 3y agoYou're right and I was wrong. The DKIM signer selects a list of headers (h=) to be signed, but the body is always implicitly included (and thus not listed). I was confused because I thought there needed to be a flag to include it, and had never seen such from Gmail or others. For anyone else that's curious: https://rfc-editor.org/rfc/rfc6376#section-3.7 https://rfc-editor.org/rfc/rfc6376#section-3.7