ITU Corporate Strategy Newslog - Gmail uses DomainKeys to lock out eBay phishing attacks

Friday, July 11, 2008

Gmail uses DomainKeys to lock out eBay phishing attacks

eBay and PayPal have linked up with Gmail to roll out technology designed to block fraudulent emails and phishing attacks.

DomainKeys and DomainKeys Identified Mail (DKIM) email authentication technology is being used to prevent the delivery of bogus messages posing as emails from eBay and PayPal into Gmail users' inboxes.

DomainKeys technology is designed to verify both the DNS domain of an email sender and the integrity of a message. DKIM is an enhanced protocol that also adds aspects of Identified Internet Mail to the mix.

Both approaches are geared to uncover spoofing of source addresses in emails, a tactic commonly used by phishers.

However, there are limitations. If an email messages comes from an eBay or PayPal domain and fails to include a proper signature, then the message will not be delivered. Additionally, PayPal scams that claim to come from other domains may fall though the net.

Read Full Story

Highlights | Internet | Software Vulnerabilties

Friday, July 11, 2008 8:31:40 AM (W. Europe Standard Time, UTC+01:00)

Categories

About

The information presented within this blog comes from various organizations around the world. ITU encourages users to seek more detailed information from the original source through the links provided. Links to third-party websites are provided for the convenience of all users. The ITU is not responsible for the accuracy, currency or the reliability of the content on these third-party websites. ITU does not offer any guarantee in that regard nor does ITU endorse the third-party organizations, their sites or content.

E-mail