News for hackers. Stuff that matters.

A comment on Gmail spam-filters PayPal security messages. Parent comment

Re:Gmail spam-filters PayPal security messages by AstralStorm on Thursday February 07, 2019 @06:27AM (#19104526)
How do you fake DKIM though? That is as good as a TLS certificate.

I suppose someone might've taken over your browser or email client, but then it is game over anyway.

Perhaps PayPal should start MIME signing whole messages...

[ Parent | on HN ]
Re:Gmail spam-filters PayPal security messages by cm2187 on Thursday February 07, 2019 @07:30AM (#19104784)
Which is why I think it was rather a moronic choice of domain on the part of paypal. But I know how to look for spf/dkim validation. A normal user (or a user using a mobile/tablet) will make a decision purely on the domain of a link.
[ Parent | on HN ]