[thewebguyd]

I'm of the opinion that most (not all) email phishing can be solved if we all just collectively admitted that HTML email was a mistake, and go back to text based only and enforce that everywhere.

No more logos, no more masked links (you have to acutally copy and paste the text, giving you a chance to review the URL), no more QR code phishing, no more realistic looking but fake DocuSigns. Get rid of attachments while we are at it, there are other, better ways to share files within an office environment (because ultimately, if we enforce text only, then all phishing would then arrive via attachment in the form of a PDF or rich word doc with the fake logos and a clickable link).

[ttGpN5Nde3pK]

I already disable images, but sign me up for text only email!

[whatevaa]

I don't believe copying links would actually solve anything. Attachments are used not just in office environments.

[thewebguyd]

At the very least it would stop the link manipulation that some email systems do (looking at you Exchange Online w/ "Link Protection") so now you get to see that it's some phishing site going to g00gle.co instead of Exchange's "protection.officelinks.com/asfgqwerty12345...." and so on for 150 characters.

[baobun]

Giving up HTML emails? Prepostorous. Users won't accept it now that they are this used to it. Retraining that is unrealistic. Someone of the metrics!

The only solution (which will solve the problem, as it is marketed as phising-resistant) is to remove passwords entirely and force everyone to use passkeys.

/s