Digitally Signed Do-Not-Reply Email - Revision history

Simson at 01:36, 24 September 2012

2012-09-24T01:36:06Z

← Older revision		Revision as of 18:36, 23 September 2012
Line 11:		Line 11:
	Digital signatures and digitally signed mail are two technologies that were created in the 1990s specifically to solve this problem. With digital signatures each message is signed so that it's authenticity can be directly verified.		Digital signatures and digitally signed mail are two technologies that were created in the 1990s specifically to solve this problem. With digital signatures each message is signed so that it's authenticity can be directly verified.

	To send digitally signed mail an organization must obtain a certificate for each '''from:''' address that they wish to use. Such certificates typically cost $35/year for each '''from:''' address. There is no per-~~user~~ cost.		To send digitally signed mail an organization must obtain a certificate for each '''from:''' address that they wish to use. Such certificates typically cost $35/year for each '''from:''' address. There is no per-recipient or per-message cost, nor any advance planning required on the part of recipients. This is different from encrypted mail, which requires that each intended recipient first obtain a digital certificate.

	To verify a digitally signed message users must read their mail with an appropriate mail reader. Today there is support for verifying S/MIME signed messages in the following mail programs:		To verify a digitally signed message users must read their mail with an appropriate mail reader. Today there is support for verifying S/MIME signed messages in the following mail programs:

Simson at 01:34, 24 September 2012

2012-09-24T01:34:37Z

← Older revision		Revision as of 18:34, 23 September 2012
Line 7:		Line 7:
	:::[[File:Va-do-not-reply.png]]		:::[[File:Va-do-not-reply.png]]

	Do-not-reply email frequently directs users to click on a link or take some other form of action. ~~Unfortunately, because~~ the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.		Do-not-reply email frequently directs users to click on a link or take some other form of action. Because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.

	Digital signatures and digitally signed mail are two technologies that were created in the 1990s specifically to solve this problem. With digital signatures each message is signed so that it's authenticity can be directly verified.		Digital signatures and digitally signed mail are two technologies that were created in the 1990s specifically to solve this problem. With digital signatures each message is signed so that it's authenticity can be directly verified.

Simson at 01:34, 24 September 2012

2012-09-24T01:34:05Z

← Older revision		Revision as of 18:34, 23 September 2012
Line 1:		Line 1:
	Many organizations send email to consumers or employees that directs action: Examples includes:		Many organizations send email to consumers or employees that directs action. Examples includes:
	* Banks sending mail to customers that their statements are ready for view.		* Banks sending mail to customers that their statements are ready for view.
	* e-commerce websites sending special offers and advertisements.		* e-commerce websites sending special offers and advertisements.

Simson: /* Bibliography */

2012-09-23T19:23:56Z

Bibliography

← Older revision		Revision as of 12:23, 23 September 2012
Line 26:		Line 26:
	#Garfinkel, S., Schiller, J., Nordlander, E., Margrave, D., and Miller, R., [http://www.simson.net/ref/2004/fc2005_smime_submitted.pdf "Views, Reactions and Impact of Digitally-Signed Mail in e-Commerce"], [http://fc05.ifca.ai/ Ninth International Financial Cryptography and Data Security Conference], February 28-March 3, 2005, Roseau, The Commonwealth of Dominica. (Acceptance rate: 26%, 24/90)		#Garfinkel, S., Schiller, J., Nordlander, E., Margrave, D., and Miller, R., [http://www.simson.net/ref/2004/fc2005_smime_submitted.pdf "Views, Reactions and Impact of Digitally-Signed Mail in e-Commerce"], [http://fc05.ifca.ai/ Ninth International Financial Cryptography and Data Security Conference], February 28-March 3, 2005, Roseau, The Commonwealth of Dominica. (Acceptance rate: 26%, 24/90)
	#Garfinkel, S. [http://simson.net/clips/academic/2003.IEEE.EBAI.pdf Email-Based Identification and Authentication: An Alternative to PKI?,] IEEE Security & Privacy, November/December 2003.		#Garfinkel, S. [http://simson.net/clips/academic/2003.IEEE.EBAI.pdf Email-Based Identification and Authentication: An Alternative to PKI?,] IEEE Security & Privacy, November/December 2003.
	#Garfinkel, S. [http://simson.net/clips/academic/2003.DGO.GarfinkelCrypto.pdf Enabling Email Confidentiality through the use of Opportunistic Encryption"], presented at the [http://www.dgrc.org/dgo2003 2003 National Conference on Digital Government Research], May 2003, Boston, MA. <span class='web'> [http://www.simson.net/ref/2003/2003_May_DGO.~~ppt~~ (slides)]</span>		#Garfinkel, S. [http://simson.net/clips/academic/2003.DGO.GarfinkelCrypto.pdf Enabling Email Confidentiality through the use of Opportunistic Encryption"], presented at the [http://www.dgrc.org/dgo2003 2003 National Conference on Digital Government Research], May 2003, Boston, MA. <span class='web'> [http://www.simson.net/ref/2003/2003_May_DGO.pdf (slides)]</span>

Simson at 19:22, 23 September 2012

2012-09-23T19:22:37Z

← Older revision		Revision as of 12:22, 23 September 2012
Line 5:		Line 5:
	Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:		Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:

	;[[File:Va-do-not-reply.png]]		:::[[File:Va-do-not-reply.png]]

	Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.		Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.

Simson at 19:22, 23 September 2012

2012-09-23T19:22:02Z

@@ Line 5: / Line 5: @@
 Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:
-[[File:Va-do-not-reply.png]]
+;[[File:Va-do-not-reply.png]]
 Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.

Simson at 19:12, 23 September 2012

2012-09-23T19:12:13Z

← Older revision		Revision as of 12:12, 23 September 2012
Line 5:		Line 5:
	Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:		Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:

	[[File:va-do-not-reply.png]]		[[File:Va-do-not-reply.png]]

	Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.		Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.

Simson at 19:06, 23 September 2012

2012-09-23T19:06:44Z

← Older revision		Revision as of 12:06, 23 September 2012
Line 5:		Line 5:
	Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:		Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:

	[~~http~~:~~//simson.net/ref/2012/~~va-do-not-reply.png]		[[File:va-do-not-reply.png]]

	Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.		Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.

Simson at 19:02, 23 September 2012

2012-09-23T19:02:10Z

← Older revision		Revision as of 12:02, 23 September 2012
Line 5:		Line 5:
	Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:		Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:

	~~<img src="~~http://simson.net/ref/2012/va-do-not-reply.png">		[http://simson.net/ref/2012/va-do-not-reply.png]

	Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.		Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.

Simson: Created page with "Many organizations send email to consumers or employees that directs action: Examples includes: * Banks sending mail to customers that their statements are ready for view. * e..."

2012-09-23T19:00:21Z

Created page with "Many organizations send email to consumers or employees that directs action: Examples includes: * Banks sending mail to customers that their statements are ready for view. * e..."

New page

Many organizations send email to consumers or employees that directs action: Examples includes:
* Banks sending mail to customers that their statements are ready for view.
* e-commerce websites sending special offers and advertisements.
* Educational organizations sending out notices to students and faculty.
Typically such email is sent with an invalid From: address and with a notation ''Do not reply to this email; it is sent from an unmonitored mailbox.' For example, here is an email message that I recently received from the Virginia Department of Motor Vehicles telling me that my vehicle registration had to be renewed:

<img src="http://simson.net/ref/2012/va-do-not-reply.png">

Do-not-reply email frequently directs users to click on a link or take some other form of action. Unfortunately, because the email is sent from an unmonitored mailbox, there is no way for the recipient to verify the email's authenticity other than by following its directions. Such practices make users vulnerable to phishing, spear-phishing, and other kinds of email-based scams.