News for hackers. Stuff that matters.

A comment on The Dream of Usable Email Encryption Is Still a Work in Progress. Parent comment

Re:The Dream of Usable Email Encryption Is Still a Work in P... by mike_hearn on Sunday March 27, 2016 @01:21PM (#11370663)
Most mail is now signed with DKIM.
[ Parent | on HN ]
Re:The Dream of Usable Email Encryption Is Still a Work in P... by rubyfan on Sunday March 27, 2016 @03:24PM (#11371128)
Great, if you trust your middle man email provider to get this right and want no visibility on the message's authenticity.

DKIM is much more a spam fighting tool than a substitute for E2E authenticity validation.

[ Parent | on HN ]
Re:The Dream of Usable Email Encryption Is Still a Work in P... by mike_hearn on Sunday March 27, 2016 @03:43PM (#11371197)
If you don't trust your send gateway then you are without a doubt hosed anyway, as they can just strip your signature anyway (or, replace it with one linked to a key they generated in your name on the fly). Yes, if your correspondant is super on the ball and notices that you didn't sign/encrypt this specific message, maybe you win. But if I were a bad MITM I'd just put "Sent from my iPhone" at the bottom and there is the plausible explanation.
[ Parent | on HN ]