Hacker News Reader

Wouldn't DKIM verification require having the public key of Gmail from 2014 on hand? I looked up some old 2014 era emails I got from gmail and it looks like they were using the "20120113" selector at the time, which is no longer available through DNS query.

View on HN

There are historical DNS data vendors, as there are historical WHOIS data vendors. Also, Google would almost certainly respond to a journalistic inquiry about a cryptographic signature. Follow-up of this kind is what we should expect from journalists.

After some googling, I managed to find the public key corresponding to that selector in a github repo: https://github.com/PaloAltoNetworks/aws-elb-autoscaling/blob...

edit: Seems to be an old test vector for dnslib: https://github.com/paulc/dnslib/blob/d806cfc828d6bbae45c9b4c...

Reply on news.ycombinator.com