Hacker News Reader

> google checking gpg signature? nope

Are you proposing that they mark every mail spam that's not on the contact list of user? Otherwise checking signatures doesn't do anything, spammers already use dkim.

View on HN

One idea would be to treat an email from someone you don't know with the normal level of suspicion for that case. The HTML would be converted to something safe for the user's browser. Image loading would be blocked. You would probably throw on a few spam points. Anything other than an introduction message gets lots of spam points. Anything that was properly signed would skip the spam process entirely.

that makes sense, without breaking the actual mail flow

once you receive a message that you actually want, you could validate the signature and every subsequent communication from this sender is more likely a desired email than a spam

Reply on news.ycombinator.com