Re:Ok Google: please publish your DKIM secret keys
by simias on Monday November 16, 2020 @02:39PM
(#25116047)
I don't know how I feel about it but I do think it's an interesting argument. The point of DKIM is, first and foremost, to fight spam. The non-repudiation aspect is, as far as I'm concerned, a side effect of DKIM, not a core feature.
The more I think about it the more I inch towards agreeing with TFA. If I need my email to be authenticated I can sign them with GPG. If the law enforcement needs to see if I did or did not send an email they can subpoena Google.
>Non-repudiation over time is a truly powerful property of DKIM'd email for a great many uses outside of blackmail.
Can you expand on this? I can't really come up with a use case that wouldn't be about associating somebody with an email they may want to distantiate themselves from.
The more I think about it the more I inch towards agreeing with TFA. If I need my email to be authenticated I can sign them with GPG. If the law enforcement needs to see if I did or did not send an email they can subpoena Google.
>Non-repudiation over time is a truly powerful property of DKIM'd email for a great many uses outside of blackmail.
Can you expand on this? I can't really come up with a use case that wouldn't be about associating somebody with an email they may want to distantiate themselves from.