|
|
|
|
|
by nulbyte
992 days ago
|
|
> The publication date of the DKIM record will be _after_ the email has been sent. Was that email even sent? Maybe it was forged after the key was leaked. This is what the author of the article is pointing out: The old private key being public, you can no longer rely on DKIM alone to prove anything about a document with a signature created with that key. |
|