News for hackers. Stuff that matters.

A comment on DKIM: Show Your Privates. Parent comment

Re:DKIM: Show Your Privates by kogir on Tuesday November 03, 2020 @12:05AM (#24976518)
DKIM makes no assertions about the timestamp. It can be anything you want, just as in any other email.

The signature can confirm parts of the email were not edited after it was signed, not that any of the contents were ever true or correct.

[ Parent | on HN ]
Re:DKIM: Show Your Privates by MaxBarraclough on Tuesday November 03, 2020 @07:12AM (#24978903)
What if you send the email from a reputable managed email service? That way, they're responsible for managing the keys, and can probably be trusted not to sign anything fraudulently.

Cheaper than paying for a digital signing service, but I imagine it wouldn't hold up as well in court.

[ Parent | on HN ]