Re:“We plan to hide ‘https’ scheme and subdomain ‘www’ in Ch...
by judge2020 on Wednesday July 31, 2019 @10:31AM
(#20574689)
> meaning it assumes that the university employees,
Phishing is definitely possible inside your email org, anything from a malicious browser extension to desktop malware might be geared to send bad links to all users (or a subset) within the logged-in Gmail/Outlook directories.
But ya, that sounds like some pretty bad anti-phishing software. Sounds like vendor lock-in more than anything, especially if it's replacing the email links on the mail server itself.
What are the chances it just runs the domain through Google safe browsing? :P
This has always driven me bonkers about the ProofPoint URL-obfuscation 'security'. My work started enforcing this recently, and it drives me crazy:
1. rather than training you to think more carefully about links in e-mails, it trains you to click blindly, because the software says it's safe;
2. it obscures the target of the URL, so that a URL that even a novice would recognise as fishy becomes a garbled string like any other—here's an example (but safe) mangled URL:
3. it filters outgoing links, meaning it assumes that the university employees, not just outside spammers, are hostile (but maybe this is a reasonable assumption?).