On Fri, 3 May 2019 13:28:00 -0600 Grant Taylor wrote: > On 5/3/19 11:53 AM, David Jones wrote: > > Not completely true as long as domain/DNS control is not > > compromised. > > How is it not completely true? > > My server can apply a DKIM signature to an outgoing email with a > From: header of djo...@ena.com.
But if you sign it with d=ena.com it wont pass as valid, unless you have also gained control of the DNS for ena.com.