26Ara
How to check e-mail message authenticity? Suspected EML file forging
In a small company, we have an issue suspecting a former employee has forged an e-mail to our company from his Hotmail account by changing its date and recipients in the EML file, claiming that the recipients were aware of the content by the date that he is showing. However, we have never seen that email.
We may request a copy of the e-mail from his sent folder. And there are two outcomes, either he is a forger, or we had a glitch, which prevented the email delivery to our addresses.
Details:
Normally, emails we receive in our Outlook are signed between servers with ARC seals and DKIM signatures. Can we use that?
I am not sure how to use it for checking the authenticity "offline", or is it possible for emails from the Hotmail sent-box.
