Hacker News new | ask | show | jobs
by diggernet 3207 days ago
Also, I gather that non-text emails make it possible to disguise the link target when you hover over it to see where the link goes. Whether that is using css or js, I'm not sure.
2 comments

On mobile, there's no hover, so HTML mail means I just have to guess if I think the link will go where it says or not.
In iOS Mail, you don't have to guess where the link goes, press and hold on a link will show the URL.
Considering how much email is checked on mobile I am surprised your point is not being mentioned more frequently.
You can't falsify the browser indicators of link targets (status bar on desktop, modal dialog from holding down the link on mobile) without JavaScript.

You can create a misleading tooltip in HTML: <a href="https://www.megabank.com.phishingattempt.io" title="https://www.megabank.com">https://www.megabank.com</a>. But since modern browsers don't use tooltips to indicate link targets, users probably won't be looking there in the first place.