3 ms·
Companies sign official correspondence, and email clients give blaring sirens/red flags for unsigned correspondence (or send it straight to the spam folder) sim
by strbean 7y ago
Companies sign official correspondence, and email clients give blaring sirens/red flags for unsigned correspondence (or send it straight to the spam folder) similar to how browsers now handle http vs. https traffic?
It would also be very easy to detect any misrepresentation. Email contains a link to a domain that isn't on your cert? Alarms / no clickable links / etc.
- toast0 7y agoScammers are capable of setting up signing and getting certificates for their domains. It's an extra hurdle, but, like setting up https, it's not a big hurdle. No cross domain links would disrupt a lot of current emails, but most senders would likely setup in-domain redirectors to carry on their current mailing patterns. Unfortunately, some of those would probably be open redirectors (because it's easy to make an open redirector and it "solves" the immediate problem), leading to some amount of security issues.