New and interesting writeup on what ProtonMail flagged to GMail for replaying of email where some empty fields in the original were not DKIM'd and hence injectable

https://news.ycombinator.com/item?id=29942900 (it's not my post, but it was the first one here and deserves a comment or two as it is interesting IMO)