Thursday, 3 July 2008

Hotmail/Gmail/Yahoo Address Book Security

Secure Email Address Books With more scripts being written to access email address books, perhaps the onus is on the email service providers to secure the access to the address book.

Perhaps, before any application or website is allowed to access the address book, the website owner should register their domain names with the email services providers. At least this way, we can have a whitelist of "approved" websites that can access our contacts and blacklist websites that spams our friends.

Hmm, this actually lights up the bulb in my mind. Perhaps there can be an independent service provider who can issue certificates to websites that will be allowed to access our address book. Kind of like the Verisign SSL that indicates our transaction is encrypted and secure to prevent any tapping of credit card details.

Well, I'm not too sure how it's going to work, but you have to admit it's a valid idea, yes?! Hehehe...anyway, the choice is yours. If you feel that the website that is asking for your email username and password can be trusted, then you probably wouldn't mind entering your username and password. Still, the best method should be to allow the users to login to the respective email service provider's URL before accessing the address book.

Best Regards,
ed-borhan

PS: Are you interested to join me in a discussion on "Email Marketing: Permission Required"? Visit www.hi5internet.biz and register for the brunch session. It will be insightful and fun!

PPS: The post that started it all. http://edborhan.spaces.live.com/blog/cns!BBB4AD9D0112769A!427.entry

0 comments: