Re: DKIM and email address proof-of-control

2016-08-02 Thread Lachlan Gunn
Le 2016-08-02 à 23:35, MFPA a écrit : > But to bring it back > on-topic, would a DKIM signature on such a message be for the > gmail.com domain or the twopif.net domain? It the key is from twopif.net, though obviously Google have the private key rather than myself. > Is this a Denial of Service a

Re: DKIM and email address proof-of-control

2016-08-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Tuesday 2 August 2016 at 12:07:14 PM, in , Lachlan Gunn wrote: > I mean that I connect to Google's SMTP server with > Thunderbird using the > "lach...@twopif.net" login details, but configure > the account's email > address to be lachlan.g...@

Re: DKIM and email address proof-of-control

2016-08-02 Thread Lachlan Gunn
> Does that mean you sent the email from the @gmail.com address, but > because you happened to be logged in with the @twopif.net address > Google took it upon themselves to change the from address? I wouldn't > like that: it is not up to the email provider to choose which of my > email addresses I

Re: DKIM and email address proof-of-control

2016-08-02 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Tuesday 2 August 2016 at 2:32:17 AM, in , Lachlan Gunn wrote: > 2. With Gmail at least, the From seems to be > replaced with the account > that I log in from, yielding the following > (lach...@twopif.net is a > Google Apps address): >

Re: DKIM and email address proof-of-control

2016-08-01 Thread Lachlan Gunn
Hi, thanks for the response. > The links you provided point out that DKIM certifies only the domain > of the email address, not the user part. The From address in the email > header may not be the same as the MAIL FROM part of the SMTP dialogue. > It might be that the first is trus...@example.com

Re: DKIM and email address proof-of-control

2016-08-01 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Monday 1 August 2016 at 6:31:15 AM, in , Lachlan Gunn wrote: > Hello, > Has anyone had a go at using DKIM signatures as a > way of verifying > control of an email address with GPG? > I've seen a few mentions of the idea online, > particularly

DKIM and email address proof-of-control

2016-07-31 Thread Lachlan Gunn
Hello, Has anyone had a go at using DKIM signatures as a way of verifying control of an email address with GPG? I've seen a few mentions of the idea online, particularly here: https://security.stackexchange.com/questions/107417/pgp-key-signing-robot-dkim-verified-emails/ https://github.com/