Backtrack dkim observation date via email content

[foolo]

Yush G, [2024-03-20 23:59]
oh one other cool feature would be to take a past email and see if you can verify header dkim via the current dkim key — if you can, then say you saw the key on that date, not the date it was scraped

Yush G, [2024-03-20 23:59]
that way we can reach way further back into history and be confident the key was the same via the email timestamp

Olof, [2024-03-21 07:24]
yep, should be possible! as long as one has access to the whole email body

[foolo]

Yush G, [2024-03-21 08:31]
We don't need the body

Yush G, [2024-03-21 08:31]
We can use the body hash in the header