News for hackers. Stuff that matters.

A comment on The .zip TLD sucks and it needs to be immediately revoked. Parent comment

Re:The .zip TLD sucks and it needs to be immediately revoked by benatkin on Friday May 12, 2023 @05:15PM (#35922519)
Anyone can do that now.

    <a href="https://anydomainname.com/">financialstatement.zip</a>
If it's a plain text email, attachments show up in a separate area.

If it's an HTML email, you could potentially fake the attachment area with or without a .zip TLD, just by adding a carefully constructed image.

[ Parent | on HN ]
Re:The .zip TLD sucks and it needs to be immediately revoked by thefifthsetpin on Saturday May 13, 2023 @05:01PM (#35932672)
That's not going to get through even the most rudimentary anti-phishing filters, and at least some email clients still hint to you what's going to happen when merely hovering over that link.
[ Parent | on HN ]