3 ms·

Is this actually a problem in practice? How many people have presented forged emails as real without a DKIM signature, and had the press say "nah, we're not go

Is this actually a problem in practice? How many people have presented forged emails as real without a DKIM signature, and had the press say "nah, we're not going to report on that because DKIM is missing"?

vintermann 3y ago
They absolutely will assume something was fake if it's embarrassing and they think it can't be proved. Most of them don't know about DKIM signatures, though. A lot of wikileaks mails were verified with DKIM, and as I recall some of the people sending them initially denied it.
matthewdgreen 3y ago
Here is the tool the Associated Press uses to check DKIM signatures [1], and here is Wikileaks' page on DKIM [2]. DKIM is routinely used to verify emails in cases where the evidence chain back to the source is unclear. I was personally involved in a forensic effort to verify DKIM signatures on the Hunter Biden laptop [3]. [1] https://github.com/associatedpress/verify-dkim https://github.com/associatedpress/verify-dkim [2] https://wikileaks.org/DKIM-Verification.html https://wikileaks.org/DKIM-Verification.html [3] https://www.washingtonpost.com/technology/2022/03/30/hunter-biden-laptop-data-examined/ https://www.washingtonpost.com/technology/2022/03/30/hunter-...