News for hackers. Stuff that matters.

A comment on Why is no one signing their emails?. Parent comment

Re:Why is no one signing their emails? by ngrilly on Wednesday March 13, 2019 @04:16AM (#19376714)
We already have DKIM which does exactly what you describe.
[ Parent | on HN ]
Re:Why is no one signing their emails? by pilsetnieks on Wednesday March 13, 2019 @05:18AM (#19377019)
DKIM proves that it's someone with access to your domain, not you specifically.
[ Parent | on HN ]
Re:Why is no one signing their emails? by ngrilly on Wednesday March 13, 2019 @06:54AM (#19377504)
Yes, and this is in line with the article we are commenting, which talks mostly about authentifying the sending organisations and not individuals.
[ Parent | on HN ]
Re:Why is no one signing their emails? by NoGravitas on Wednesday March 13, 2019 @12:42PM (#19380505)
Actually it proves even less than that --- it proves that it's someone with access to the domain that it was sent from. And if that's not amazon.com, but instead amazon-account-services.ru, then DKIM will happily report that the message is valid.
[ Parent | on HN ]