You are signed in. Close

You are signed out. Close

Thank you. Your subscription has started. Close

Thank you. You will get an email when a new comic comes out. Close

We could not confirm your payment. If you paid, use the link "Sign in" at the bottom of the page. Close

Something went wrong on our side. Please try again in a moment. Close

Previous episode Envelope sender vs From: the two sender addresses of every email

How email works: why a fake email from your boss can reach your inbox

DKIM: how a mail server signs the emails it sends

Most emails you get carry a signature you never see. What does that signature prove, and what can it never prove?

  1. 1 SPF alone did not stop Rono, so Miva adds a second check, one that travels inside the email itself. Here is a real email from her, on its way to a customer. Before it leaves, the workshop's mail server adds one line at its top, a line the customer's phone does not show.the workshop'smail serverFrom: miva@woodshop.exampleTo: a customerone more line

    SPF alone did not stop Rono, so Miva adds a second check, one that travels inside the email itself. Here is a real email from her, on its way to a customer. Before it leaves, the workshop's mail server adds one line at its top, a line the customer's phone does not show.

  2. 2 The line holds a long string of letters and digits, made from the email itself: its From line, its subject and its words.q7Hd0kZ2mA9xPe4wFrom: miva@woodshop.exampleSubject: Your table is readymade from these

    The line holds a long string of letters and digits, made from the email itself: its From line, its subject and its words.

The rest of this episode is for subscribers

Subscribe to read every premium episode. You can cancel when you want.

Paid yearly: $99 instead of $119.88

Next episode DMARC: how a domain tells mail servers what to do with fakes

Share this comic

More comics