Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Signing e-mail servers two different purposes:

Authenticating the actual sender vs. authenticating the server or service controlling the domain for reputation purposes.

If you trust Amazon enough to use their cloud services, there's little reason not to trust them for the latter. Doesn't mean trusting them with respect to the former.

Things like DKIM makes no assertion that the content was sent by the right person; just that whomever controls the domain has trusted the service in question to send e-mail on their behalf.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: