RE: why bodyhash if just an authentication mechanism

From: Murray S. Kucherawy <msk_at_blackops.org>
Date: Sun, 18 Dec 2011 00:43:42 -0800 (PST)

On Sat, 17 Dec 2011, SM wrote:
> I guess that the easy answer would be that DKIM does not offer the type
> of protection that PGP or S/MIME offers.

In fact, the only ways they're different are the mechanisms of key
distribution and data preparation. Apart from that it's still some
private key encrypting the hash of some blob of bits, and you're trying to
repeat the operation using a public key you got somewhere.

PGP and S/MIME are only different from DKIM because they say they are, not
because the mechanisms are actually any different.
Received on Sun Dec 18 2011 - 08:43:55 PST