News for hackers. Stuff that matters.
Re:Ok Google: please publish your DKIM secret keys by some_furry on Monday November 16, 2020 @02:00PM (#25115564)
> Has this kind of repudiation ever been tested in the real world? It's hard to imagine a court throwing out email evidence because it lacked a DKIM signature.

They're more likely to ask their expert witness to testify about the evidence, and the deniability of the DKIM signature could be brought up by the expert witness as a reason to distrust the evidence. I wouldn't expect lawyers to discover this argument from first principles.

Has it ever happened? Not that I know.

Re:Ok Google: please publish your DKIM secret keys by moyix on Monday November 16, 2020 @02:08PM (#25115670)
The success of the "trojan defense" is encouraging on this point, I guess:

https://en.wikipedia.org/wiki/Trojan_horse_defense#Cases_inv...

I'm sure defense lawyers would love it :)

Re:Ok Google: please publish your DKIM secret keys by Natanael_L on Tuesday November 17, 2020 @06:45AM (#25122621)
I would expect any half decent prosecutor to focus on how the emails were acquired when a verifiable DKIM signature is missing. Then the defense doesn't even need to bring that argument up, just challenge the provenance of the evidence.