The best solution to the most common kind of phishing (pretending to be a bank) would be an engineering solution: digital signatures on e-mails. It's pretty tr

The best solution to the most common kind of phishing (pretending to be a bank) would be an engineering solution: digital signatures on e-mails. It's pretty trivial, and has been possible for a long time, I don't know why it hasn't been adopted by email programs by default. Though it appears that at least gmail is working on this. I recently enabled a (labs) feature on my gmail account, and emails that are really from Paypal are now marked with a yellow key. This is a little step forward, but a step forward nevertheless...