why there is nothing like a “verified checkmark” for E-Mails of real companies like PayPal to distinguish their E-Mails from scams

1.93K views

why there is nothing like a “verified checkmark” for E-Mails of real companies like PayPal to distinguish their E-Mails from scams

In: 7499

69 Answers

Anonymous 0 Comments

There is. I see SPF, DKIM, and DMARC mentioned, but also BIMI allows you to assign a copyrighted logo to your emails that you digitally sign as yours- which is almost exactly the ‘verified’ checkmark you’re asking about!

Anonymous 0 Comments

Demarc serves this purpose. The majority of domains haven’t implemented this and the receiving end cannot drop anything that doesn’t pass Demarc due to low uptake.

Anonymous 0 Comments

There is. I see SPF, DKIM, and DMARC mentioned, but also BIMI allows you to assign a copyrighted logo to your emails that you digitally sign as yours- which is almost exactly the ‘verified’ checkmark you’re asking about!

Anonymous 0 Comments

Demarc serves this purpose. The majority of domains haven’t implemented this and the receiving end cannot drop anything that doesn’t pass Demarc due to low uptake.

Anonymous 0 Comments

There is. It’s called Sender Policy Framework. It is a record in DNS (Domain Name Service, which translates something like gmail.com to IP addresses or other types) that ensures an email claiming to be from a specific domain name was sent by a mail server authorized in the DNS record. The problem is that some mail servers allow non authorized emails through because some mail server administrators are lazy and don’t establish SPF records. Personally, I require all emails to have. proper SPF record on servers I administrate. When people complain they aren’t receiving email from a specific company I send them info on how to set up SPF. I’m not confident we will achieve 100% coverage.

Anonymous 0 Comments

Demarc serves this purpose. The majority of domains haven’t implemented this and the receiving end cannot drop anything that doesn’t pass Demarc due to low uptake.

Anonymous 0 Comments

There actually is, it’s called dmarc and dkim records. The problem is that the companies don’t set up their domain names properly.

I checked the top 100 online retailers’ domain names recently and on 7 percent of them had their domain names set up, such as setting up dmarc records in their domain name to prevent email scams.

Pretty soon we will have NameBlock, and companies will be able to completely block certain scam domain names from even being registered, so that will help out a lot.

Anonymous 0 Comments

There is. It’s called Sender Policy Framework. It is a record in DNS (Domain Name Service, which translates something like gmail.com to IP addresses or other types) that ensures an email claiming to be from a specific domain name was sent by a mail server authorized in the DNS record. The problem is that some mail servers allow non authorized emails through because some mail server administrators are lazy and don’t establish SPF records. Personally, I require all emails to have. proper SPF record on servers I administrate. When people complain they aren’t receiving email from a specific company I send them info on how to set up SPF. I’m not confident we will achieve 100% coverage.

Anonymous 0 Comments

There actually is, it’s called dmarc and dkim records. The problem is that the companies don’t set up their domain names properly.

I checked the top 100 online retailers’ domain names recently and on 7 percent of them had their domain names set up, such as setting up dmarc records in their domain name to prevent email scams.

Pretty soon we will have NameBlock, and companies will be able to completely block certain scam domain names from even being registered, so that will help out a lot.

Anonymous 0 Comments

There is. It’s called Sender Policy Framework. It is a record in DNS (Domain Name Service, which translates something like gmail.com to IP addresses or other types) that ensures an email claiming to be from a specific domain name was sent by a mail server authorized in the DNS record. The problem is that some mail servers allow non authorized emails through because some mail server administrators are lazy and don’t establish SPF records. Personally, I require all emails to have. proper SPF record on servers I administrate. When people complain they aren’t receiving email from a specific company I send them info on how to set up SPF. I’m not confident we will achieve 100% coverage.