Oh, all I’m saying is that presenting the logo without a proper check or after 
being fooled into a proper check would be a problem.  And there’d be some 
creative ways (css? logo included at random other places in the friendly from? 
etc) spammers would look at mimicking such a logo

--srs
________________________________
From: mailop <mailop-boun...@mailop.org> on behalf of Dave Crocker via mailop 
<mailop@mailop.org>
Sent: Saturday, July 25, 2020 11:32:46 PM
To: mailop@mailop.org <mailop@mailop.org>
Subject: Re: [mailop] BIMI pilot @ Google

On 7/22/2020 3:45 PM, Marcel Becker via mailop wrote:
> However the majority of our users prefer meaningful avatars and brand
> logos in their email experience as it helps them identify email senders
> and it helps with them with triaging.


As others have noted, BIMI is a logo-display service, not a security
service.

To make this point a bit stronger:  BIMI provides no incremental
security-related capabilities, such as anti-phishing.

Claims that presenting logos to users aids in anti-phishing efforts are
counter-factual.  There's no data supporting the view that it's helpful
and substantial history that it isn't.

To the extent anyone disagrees with this assessment, it would be quite
helpful to see the data.

d/

--
Dave Crocker
Brandenburg InternetWorking
bbiw.net


_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to