[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Asrg] where the message originated (was: DKIM role?) (SM)
Banks use credit card which have been proven weak.
They compensate by insuring you against fraud and having a big legal department that follow the cases. That's if the bank is respectable, but they are becoming less and less..
Before you would go to a bank because they projected trust and reputation, now you have to go to the bank if you want to buy anything. Many online commerce appply filtering rules based on credit card location, IP location, and other hidden mechanism. But that's a discussion for another forum.
My point is that solving email authentication, may not solve real world problems.
----- Original Message -----
From: "der Mouse" <mouse at Rodents-Montreal.ORG>
To: "Anti-Spam Research Group - IRTF" <asrg at irtf.org>
Sent: Tuesday, 20 January, 2009 7:44:24 AM (GMT+1200) Auto-Detected
Subject: Re: [Asrg] where the message originated (was: DKIM role?) (SM)
> Have you actually looked at the mail from your bank?
Thank you for explaining so clearly why I do not, ever, do anything
"online" with my bank. (Makes it really easy to identify phishes. :)
Now, if they were to sign the mail with some content mechanism like PGP
or S/MIME, with the key available by going to the branch in person, I
might trust it.
More likely not, though, since I've seen enough over my bank's
personnel's shoulders to convince me they run Windows internally, so I
don't trust them to manage their private key data properly either. (Of
course, if they got enough clue to start doing real signatures on
email, they might also grow a clue when it comes to managing their
internal systems.)
/~\ The ASCII Mouse
\ / Ribbon Campaign
X Against HTML mouse at rodents-montreal.org
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B
_______________________________________________
Asrg mailing list
Asrg at irtf.org
http://www.irtf.org/mailman/listinfo/asrg
_______________________________________________
Asrg mailing list
Asrg at irtf.org
http://www.irtf.org/mailman/listinfo/asrg