Hi everybody,
I was hoping to get some clarification regarding the DKIM end-to-end
authentication.
------------------------------
From:
-
http://www.dkim.org/specs/draft-ietf-dkim-overview-09.html
"DKIM adds an end-to-end authentication mechanism to the existing
email transfer infrastructure"
-
http://en.wikipedia.org/wiki/DomainKeys_Identified_Mail
"Note that DKIM is not designed to provide end-to-end integrity"
-
http://tools.ietf.org/html/rfc6376#section-1.5
"Verifying the signature asserts that the hashed content has not
changed since it was signed and asserts nothing else about
"protecting" the end-to-end integrity of the message"
------------------------------
So as you can see I find different statements in different articles.
Could someone of you confirm that using DKIM I can ensure that, if
anyone altered the email-address of the user who sent the email, I'll
be able to spot it?
Thanks in advance.