News for hackers. Stuff that matters.

A comment on Why is no one signing their emails?. Parent comment

Re:Why is no one signing their emails? by pilsetnieks on Wednesday March 13, 2019 @05:17AM (#19377004)
DKIM is for an entire domain, not individual addresses, though.
[ Parent | on HN ]
Re:Why is no one signing their emails? by Vendan on Wednesday March 13, 2019 @10:33AM (#19379013)
But it can work for individual addresses as well. For instance, gmail uses DKIM. If they only DKIM sign an email if the user is logged in as the address they are trying to send as, then boom, DKIM is proof that the email from is not forged, and the only way to bypass it is to hack the account.
[ Parent | on HN ]
Re:Why is no one signing their emails? by jhasse on Wednesday March 13, 2019 @10:34AM (#19379020)
Sure, but why would the SMTP server sign an email with the wrong login?
[ Parent | on HN ]