Re: [exim] Anti Phishing Trick

On Wed, 31 Aug 2005, David wrote:

> Hi !!
>
> >>all of this requires a great effort, and at the end pishers could easly
> >>pass through this systems.
> >
> > Please tell me how. That's what I'm asking... before I go to the
> > great effort.
>
> very easy, supose the bank domain name is bbvanet.com, the pishers could
> send pishing from bbbanet.com, bvvanet.com, bvanet.com, etc ... as

Oh good. This won't work for a healthy C/R variant because those
addresses are not on the white list, only the real bank will be on the
white list.

Thank you.

Marilyn

> pishing have links where the user should enter his data and do not
> require the user to answer by email, the envelope sender or the From:
> header has very limited use (specially the envelope sender)
>
> > You mean on the From:, I think. The To: will have the user's own
> > address.
>
> sorry, of course, i was talking about From:
>
>

--