3 ms·
I know you are the resident curmudgeonly voice of security truthfulness on Hacker News, but it's really odd that you keep referring to anti-phishing measures as
by rsingel 14y ago
I know you are the resident curmudgeonly voice of security truthfulness on Hacker News, but it's really odd that you keep referring to anti-phishing measures as anti-spam, as if they have no relation whatsoever to security.
DKIM plays a key role in keeping phishing e-mails out of the inboxes of hundreds of millions of people who have no idea what PGP or an e-mail header is. It's a standard, not just a Google feature.
And if you'd read the story, you'd see that a number of companies fixed their weak crypto thanks to his efforts.
But, of course, far fewer people would upvote your comments if you didn't diss everything with a tone of condescension.
- tptacek 14y agoRyan, I wrote: DKIM is an anti-spam mechanism. It does not authenticate the sender of an email message; to do that, use something like PGP. This is an interesting story, but it's not a story about a "massive net security hole". Mail on the Internet has always been spoofable. What else do you want me to say? Mail on the Internet is spoofable, with or without DKIM. I literally don't know what I can do to placate you at this point.