I think you might be overestimating the level of technical sophistication at play here—if you asked me “how can we verify that these emails are real,” I might’ve been able to come up with this idea, but it certainly wasn’t the first thing that jumped into my head reading the article, and I doubt NYPost has anyone on staff who thought to do this either (unless perhaps verifying leaked emails is something they do regularly?).