Recently, Google announced that eBay and PayPal have successfully implemented DomainKeys Identified Mail (DKIM) signatures. As a result, any email that comes to a Gmail inbox from @paypal.com or @ebay.com is actually certified to be from them. Those pretending to be from those companies (in the form of phishing emails) will not make it into the inbox because they won’t pass the DKIM signature test.
“…eBay and PayPal have worked hard to ensure that all their email is signed with DomainKeys and DKIM. Armed with this information, Gmail can easily reject as a fake anything that doesn’t authenticate. We’ve been testing this for a few weeks now and it’s working so well that few people really noticed.
We think it’s great that PayPal and eBay have taken on the challenge of securing email, and we’re pleased to have put our best efforts together to make this work. It’s a bold move, but one that will really help fight phishing. Our hope is that this will set a good example for other organizations to follow (yes, it can be done!) and that over time more and more email will become trustworthy…” continue reading
We discussed the importance of certifying yourself as a sender previously on this blog:
“…Mark Risher, the anti-abuse product manager for Yahoo! Mail, explains that emails that aren’t authenticated with [DomainKey] signatures are deemed suspicious and routed through additional message-screening filters before getting to the recipient inbox…” continue reading
The importance of email certification is being embraced by many organizations who rely on the integrity of email. This is illustrated by the recommendation of the Banking Industry Consortium to its members to start authenticating their emails.
“… Adoption continues apace throughout the Internet space, and Risher also said banking industry consortium BITS recommended adoption of DKIM for financial institutions. That would go a long way toward restoring trust in email messages from banks, a regularly spoofed item by criminal phishers…” continue reading
If you are interested in implementing DomainKeys or DKIM into your email marketing strategy, a good place to start is the DomainKeys Identified Mail website, dkim.org