That's an entertaining idea and almost crazy enough to work. The main problem I see with it, besides being virtually impossible to get it adopted, would be how to enforce it. We already have the problem that it is difficult to tell for sure where an email is coming from--hence the problems with phishing and viruses that spoof email addresses. So there would still need to be a way to definitively identify the actual sender of the message, as opposed to who is claiming to send the message.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/404/33796#33796