The photos are legit, obviously, but the emails as are yet not authenticated. All we got to see was a PDF printout. The full emails, with DKIM headers, being released would solve this problem instantly.

The only practical way for the Post to verify the authenticity of the emails is via the DKIM signature. It's also trivial for them to share the emails and their headers as opposed to just sharing screenshots of them, if they're interested in making it easy to verify the emails' authenticity.

I'd say there's a far better chance the photos and videos are real than the emails. Given Biden's political connections I think getting videos of his kid smoking crack would be considered very valuable compared to what it would cost to have some party pal take the video.

Think about how well it works for a scenario like this. Using real videos to legitimize fake emails is an easy win, especially if you don't release either. No on can disprove the legitimacy of the emails and if Biden says they're total BS you release the real videos to add more legitimacy and give the whole thing another news cycle. Then you claim victory and go silent.