Security News > 2020 > November > Compsci guru wants 'right to be forgotten' for old email, urges Google and friends to expire, reveal crypto-keys

Matthew Green, associate professor of computer science at Johns Hopkins University in the US, wants Google and other email providers to make it possible for people to deny they've written old email messages.

He has asked the Gmail goliath, as the largest commercial email service, to rotate its Domain Keys Identified Mail encryption keys periodically and to publish old keys to reduce the incentive for hackers to steal and leak email messages.

As he explains, email service providers like Google's Gmail add a DKIM cryptographic signature to email messages.

If Google were to publish its DKIM keys after a certain period of time, then messages signed with those decommissioned keys could no longer be convincingly tied to a given author.

The Register asked Google whether it would consider rotating and publishing its DKIM keys.

News URL

https://go.theregister.com/feed/www.theregister.com/2020/11/19/dkim_encryption_expiration/