hunter-dkim

hunter-dkim copied to clipboard

Nice work. One comment.

1

Thanks for posting this repo. It's an interesting technical/intellectual exercise. I'm no expert, but I've configured and managed mail servers using DKIM for several years now and have had to...

smckown

Apparently there is a discussion on Wikipedia about this https://en.wikipedia.org/wiki/Talk:Biden%E2%80%93Ukraine_conspiracy_theory/Archive_3#DKIM_email_verification

M-i-k-o-t-o

does DKIM verify that it actually went to Hunter?

22

i.e. we can use DKIM to verify the sender, but can we use DKIM to verify the recepient? i.e. the To: header (which is part of the dkim hash) isn't...

sjpotter

Brute-forcing the signature

2

I have little experience with cryptography but was wondering about this the other way around. Given that we (at least for now) have a single email with headers, would brute-forcing...

phillipseamore

FAQ appears to be slightly empirically off but thanks for publishing this repo

3

* I assert emails from January 2015 can verify against the current modern gmail DKIM keys. I believe the key rotation was patchy/rolling and took a long time. I also...

midnightmagic

Add instructions for key triangulation

2

A question some people will have when confirming this confirmation is if the provided key old google key is authentic. One way that you can check this is by checking...

gmaxwell

The FAQ (which is a nice addition) says that due to being quoted-printable, there's no place to add a space. I'm not entirely sure what you mean by that. ```...

stevecheckoway

As you say, this particular email says nothing except that he "met" Joe Biden, which could be as little as getting the opportunity to shake his hand. Probably more important...

gwd