Live data from Hacker News

Verifying Wikileaks DKIM-Signatures

solsticlipse.com

1–10 of 38 posts

Re: Verifying Wikileaks DKIM-Signatures

#2
I didn't realize the signatures were leaked as well. Surprised nobody has looked at this yet, if we have cryptographic proof that certain emails are genuine, that shoots down a big counter-argument of "what if some emails are planted".

Re: Verifying Wikileaks DKIM-Signatures

#5
post #2

I didn't realize the signatures were leaked as well. Surprised nobody has looked at this yet, if we have cryptographic proof that certain emails are genuine, that shoots down a big counter-argument of "what if some emails are planted".

> if we have cryptographic proof that certain emails are genuine, that shoots down a big counter-argument of "what if some emails are planted".

Huh, no? I don't see how that follows logically.

If we have cryptographic proof that all email are genuine, then yes.

Right now we already know that some (most?) email are genuine. The question is whether or not the attacker, who was obviously motivated by political purposes, also inserted some fakes in the lot. (Although to me that seems highly unlikely)

Re: Verifying Wikileaks DKIM-Signatures

#6
post #2

I didn't realize the signatures were leaked as well. Surprised nobody has looked at this yet, if we have cryptographic proof that certain emails are genuine, that shoots down a big counter-argument of "what if some emails are planted".

If you click the "View Source" section, they have the entire MIME message. The display you see is formatted to make things easier to browse and list out any attachments (if any).

Re: Verifying Wikileaks DKIM-Signatures

#7
post #3

Yes, the interesting thing would be if any emails with controversial content can be verified. I don't think there were any real bombshells in the wikileaks emails, but still...

Most of the things i've came across that are being brought up as bombshells are actually incoming mails from outside the campaign.

Plus there is a number of things that are being put out of context like the Hillary hates Everyday Americans thing, where it's clear from the context that it is just about the phrasing

Re: Verifying Wikileaks DKIM-Signatures

#8
Very cool research!

Is there any proof-of-existence archive of DKIM keys or DNS record changes in general? Seems like a perfect use case for blockchain[1]. If the DKIM keys were rolled over or replaced since they were originally sent out, there wouldn't be anything to compare them against. Having a record that can show proof-of-existence (at a min point in time) would cover that.

[1]: Ha! I knew there would eventually be a legit use case!

Re: Verifying Wikileaks DKIM-Signatures

#9
post #8

Very cool research! Is there any proof-of-existence archive of DKIM keys or DNS record changes in general? Seems like a perfect use case for blockchain[1]. If the DKIM keys were rolled over or replaced since they were originally sent out, there wouldn't be anything to compare them against. Having a record that can show proof-of-existence (at a min point in time) would cover that. [1]: Ha! I knew there would eventuall…

This just requires the inability-to-rewind property of the blockchain, doesn't require there to be one centralized log of events and doesn't require protections against flooding with data (if we verify that the DNS records are correct at the point of inserting). This makes a certificate-transparency-like solution just as good and much less complicated (one can arguably call that blockchain, but usually people mean by that things that can support a currency).

Re: Verifying Wikileaks DKIM-Signatures

#10
post #3

Yes, the interesting thing would be if any emails with controversial content can be verified. I don't think there were any real bombshells in the wikileaks emails, but still...

"I don't think there were any real bombshells in the wikileaks emails, but still..."

Yes, there are quite a few bombshells. There are now tags of twitter about specific e-mails. If you are a Bernie Sanders fan, then the level of betrayal and cheating is astounding.

Never mind the e-mails that shows the staged violence at Trump rallies. If this was a Republican candidate, it would be criminal charge time with the Project Veritas videos as exhibit 2.

Post reply on HN