4 ms·
Perhaps a bit naive of me, but can't ANY email sender just include html/css of this type in their spam or regular mail to me? Can't any email sender spoof the
by amolsarva 13y ago
Perhaps a bit naive of me, but can't ANY email sender just include html/css of this type in their spam or regular mail to me?
Can't any email sender spoof the sender identity in various ways, e.g., from name, signature, and sure this picture badge thing?
- deno 13y agoWith SPF and DKIM you cannot spoof the envelope address and the “From:” header email address. If SPF would actually be required instead of optional (or even ignored), we could be free of 99% of SPAM and phising emails maybe as soon as 2009! Anyway the point of the post is that if you just add the badge thing you will end up with two different badges, which the user would obviously find suspicious. Instead, the way LinkedIn rewrites messages is exploited to get only a single badge but manipulate its content (and/or the message content). Since the message looks authentic (it’s been filtered by LinkedIn) it gives the user a false sense of security, which makes a naïve phising attempt into a very effective one. After all the point of the message rewriting was to give the impression that LinkedIn Intro is an extension to the actual email client.