3 ms·
It still frustrates me that legitimate Paypal e-mails include really big "click here to login" buttons that link you to their website. Such links are considered
by rocqua 5y ago
It still frustrates me that legitimate Paypal e-mails include really big "click here to login" buttons that link you to their website.
Such links are considered a hallmark of phishing, and there are many attempts to prevent people from clicking on such links. Many services I use include text like 'we will never send you such a link you know how to get to our website'.
The fact that paypal does not do this normalizes clicking on links in e-mails.
- gowld 5y ago"use email for notifications, but don't trust email content" is not a solution for most users. If you can't trust email, why even have it? Install a secure app and leave email behind, or make email secure by having clients clearly display cryptographically secured provenance info, and flag unknown/untrusted senders.
- rocqua 5y agoThere is no alternative to e-mail. Except perhaps for SMS. There is no other method for contacting people that is anywhere near as pervasive. It also has the advantage of being federated, not controlled by any specific entity. Besides that, compared to WhatsApp and signal, email is generally for longer and less urgent messages. Those fit notifications much better. In that context an email saying "hey this is whats up, login as you normally do if you want to verify or act accordingly". It's far from ideal. We will probably come to some form of solution at some point. But at this moment it is a clear no-brainer.