Spread it everywhere you can! The Github gives a great technical argument.
When you see shills claiming "but DKIM doesn't validate the body" point them at the damned bh parameter in the signature. That stands for "body hash" and so yes, this signature does validate the body even if DKIM in general can't be relied upon for that.
There's someone doing that on reddit's conspiracy right now. They're wrong and they can be proven wrong, so please help call them out on that!
Archive links because you know what they'll do now:
Explanation of the project: https://archive.is/4tHnN
DKIM key: https://archive.is/e2Nim
Verify.py: https://archive.is/HN6JN
Raw email showing meeting with Vadym: https://archive.is/VFqXa
NOICE - this is mine nao
Spread it everywhere you can! The Github gives a great technical argument.
When you see shills claiming "but DKIM doesn't validate the body" point them at the damned bh parameter in the signature. That stands for "body hash" and so yes, this signature does validate the body even if DKIM in general can't be relied upon for that.
There's someone doing that on reddit's conspiracy right now. They're wrong and they can be proven wrong, so please help call them out on that!
Good work on this - I appreciate it!
Archive.is works for you guys? It hasn't let me on in days. Election interference?
I think it doesn't work on Brave because of some DNS shenanigans, IIRC.