Re:DKIM: Show Your Privates
by some_furry on Tuesday November 03, 2020 @05:40AM
(#24978323)
Yes, that's the point though: To make DKIM not serve as a non-repudiation mechanism. It forces actors to go through other notarization steps instead of relying on DKIM.
[ Parent
| on HN ]
> Yes, that's the point though: To make DKIM not serve as a non-repudiation mechanism.
The devil is right in the details... it is serving just as perfectly fine as a non-repudiation mechanism as it ever was, just constrained in time to a day or so as suggested by the article. Depending on what you said to whom that you wish you hadn't said, that can be all you need to get into trouble.
Re:DKIM: Show Your Privates
by some_furry on Tuesday November 03, 2020 @06:24AM
(#24978603)
Are you familiar with the concept of Post-Compromise Security?
There is no compromise and no security breached. Just a guy who really did say something and wishes there was no evidence he said it.
Publishing the privkey just makes it so in other circumstances where he might strongly wish that he had evidence he HAD said something, the dkim signature is devalued.
Re:DKIM: Show Your Privates
by some_furry on Monday November 09, 2020 @12:24AM
(#25031715)
The author is nonbinary, not male.