The only practical way for the Post to verify the authenticity of the emails is via the DKIM signature. It's also trivial for them to share the emails and their headers as opposed to just sharing screenshots of them, if they're interested in making it easy to verify the emails' authenticity.