2 ms·
Speaking of the need for a more secure email, I just want to share an anecdote that blew my mind recently. I was trying to pay for something with a major tech c
by Osmium 13y ago
Speaking of the need for a more secure email, I just want to share an anecdote that blew my mind recently. I was trying to pay for something with a major tech company but they were having problems with my card, so they emailed me my card details to check they were correct!
I'd be tempted to name and shame them, but it's not really their fault as much as it is the specific person, because I find it hard to believe people aren't trained not to do that. Makes me think that all customer support emails should be regex'd for credit card numbers and if they're found their mail servers shouldn't allow them to be sent...
In any case, the whole institution of email is a security nightmare. I doubt this is the solution, but there certainly needs to be one, and as much for "normal" people as anyone else. We all have information that needs to be kept secure.
- showerst 13y agoI've actually worked for someone who had a company-wide email filter for credit card numbers and SSNs. It was frustrating because it would occasionally catch license keys or foreign phone numbers, but probably a good idea for some groups.
- corobo 13y agoIn the era of automatic payment processing I can't think of any reason why a member of staff should have access to anything other than the last 4 digits, name and address for verifying it's the correct card
- adambard 13y agoI've been trying to get some identity documents (birth certificate, marriage certificate) translated recently. Every place I've contacted wanted me to just email them scans of the documents, that will presumably sit on their ISP's server in plaintext indefinitely. I definitely think there's something to a messaging protocol that's simply not able to be insecure.