3 ms·
Double DKIM? The first signature for your future proof-of-authorship needs and the second for regular DKIM mechanisms to accept your email? The first key isn’
by gorgoiler 3y ago
Double DKIM?
The first signature for your future proof-of-authorship needs and the second for regular DKIM mechanisms to accept your email?
The first key isn’t ever published but you keep it if you need to prove your email was written by you.
The second key is rotated regularly with the private key published so that always have the ability to claim “I didn’t write that”.
- A1kmm 3y agoBut then you could just have a third key to use in place of the first for anything you think you might want to get out of later. You could have a mechanism to prove two emails are signed with the same key, without revealing the public key (e.g. using a zero-knowledge technique like zk-SNARKs) - but that might then be functionally equivalent to just revealing the key in terms of non-repudiation anyway.
- remram 3y agoThe comment above asked for a way to prove it was not written by you.