Re: looking for keys under the lamppost, was limitations of reputation

On Sun 24/Mar/2013 19:28:16 +0100 John Levine wrote:
>>I believe it would help with joe jobs (are they still much of a
>>problem? I haven't seen one in a while) and phishing, knowing that msg
>>from your bank is really from your bank with some confidence.
> 
> Banks can already put DKIM signatures on their mail to prove who sent
> it, and many do.  As is invariably the case, the crypto is the easy
> part, building the environment to use the crypto in a way that works
> for civilians is the hard part.

+1.

Banks _can_ but don't always do it, for example Westpac.  VBR is an
existing email authentication method that banks don't use, as if there
were no institution who can tell a bank from a lookalike.

I think I now know why you wrote about aiding "the implementation of
legal and other non-technical anti-spam measures"[1].  It takes some
market research to deploy email authentication.  Not the kind of
research we're used to.

[1] http://asrg.sp.am/
-- 

-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org