Thursday, July 10, 2008

Big Fish Games Escape From Paradise

GMail teams up with eBay and PayPal phishing

The phishing emails are a form of spam that tries to trick recipients to enable them to enter their personal data.
A classic example is a message claiming to be from PayPal in an attempt to get the password of the account in order to deplete your account.
These fraudulent emails often look official can fool convincing people to give their information in response personal.
Gmail does its best to put a label in red on the likely phishing scam, but the recognition can not be 100% perfect.
Since 2004, Google supports email authentication standards including DomainKeys and DomainKeys Identified Mail (DKIM) to verify senders and help identify forged messages.
This is the key to keep spam to Gmail inboxes.
But these systems are effective only when the vast majority of senders sign their mail - as rigurda the mail without a signature, it is difficult to say whether or not a case of phishing.

Today, Gmail working with eBay and PayPal, is a step closer to the ideal goal of the block di tutti i messaggi di phishing a loro riferiti.
Ora ogni email che sostiene di provenire da "paypal.com" o "ebay.com" (e le loro versioni internazionali) è autenticata da Gmail e - qui viene la parte più importante - respinta, se non è verificata come effettivamente proveniente da PayPal o di eBay.
Non ci sarà nemmeno il messaggio di phishing nella cartella dello spam.
Gmail non lo accetterà affatto.
Al contrario, se si riceve un messaggio in Gmail in cui il "From" dice "@ paypal.com" o "@ ebay.com", allora saprete con sicurezza che la provenienza del messaggio è PayPal o eBay.
eBay e PayPal hanno lavorato sodo per garantire che tutti i loro messaggi siano firmati con lo standard DomainKeys and DKIM.
With this information, Gmail can easily reject as false everything that you can not authenticate.
It 's very good that PayPal and eBay have taken up the challenge from Google for a safer e-mail, is a bold move but it really help fight phishing.
The hope of all is that this is a good example for other organizations, and that over time more and more email will become trustworthy.

Source: The Official GMail Blog

0 comments:

Post a Comment