DKIM2 and DMARCbis Have Landed

Email’s invisible security plumbing just got a major makeover, and the internet’s reaction is basically: finally... but also, uh-oh. The big news is that two long-brewing upgrades to email verification have arrived, promising to make messages harder to fake, less likely to break when forwarded, and better at proving whether a bounce or warning is real. Stalwart says it’s the first mail server to fully support both, which earned it a polite golf clap from one commenter who linked to a prior discussion like a proud receipt-holder: “you’re among the first few who have done it”.

But the real party starts in the replies, where the mood swings wildly between relief and doomposting. One camp is thrilled that someone is finally fixing email’s ancient weak spots. The other camp hears “new rules” and immediately sees a future where normal people are locked out of using their own domains while Google, Apple, and Microsoft sit on the throne. One commenter groaned, “Aw hell. How many things do I have to set up”, while another basically translated the whole announcement into: “Cool, but how will the big three use this to make email impossible without them?”

Then came the classic security-world horror movie subplot: a commenter warning that the new email-rewriting system sounds like a “spammer/exploit vector waiting to happen.” So yes, this is one of those deeply nerdy protocol launches that somehow turned into a familiar internet drama: is this the fix email desperately needed, or the next layer of complexity that only giant companies can afford to survive?