4 ms·
And who would control that whitelist? How would it be any different than the domain system or PKI CA system we have now? Do you think there would be the time t
by SahAssar 1y ago
And who would control that whitelist? How would it be any different than the domain system or PKI CA system we have now?
Do you think there would be the time to properly review applications to get on the whitelist?
- toast0 1y agoIn a world where those sending email were consistent, the user could control the whitelist. 'This link is from a domain you've clicked through X times, do you want to click through? Yes / Yes and don't ask again' If it's new, you should be more cautious. Except even those companies that should know better need you to link through 7 levels of redirect tracking, and they're always using a new one.
- sega_sai 1y agoA user for example. By default nothing would be in the whitelist. Then you would add things to the whitelist manually. Since it's not that frequent this needs to be done, that probably would be a useful extra step to stop phishing.
- 0xDEAFBEAD 1y agoPresumably Gmail already has anti-spam features which trigger based on domain name etc. They could add anti-phish features which force confirmation before clicking a link to an uncommon domain. Startups could pay a nominal fee to get their domain reviewed and whitelisted.