{"id":28446,"date":"2017-09-11T15:42:19","date_gmt":"2017-09-11T15:42:19","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/"},"modified":"2026-08-08T18:38:16","modified_gmt":"2026-08-08T18:38:16","slug":"the-only-safe-email-is-text-only-email-commentary","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/","title":{"rendered":"The only safe email is text-only email [Commentary]"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">It\u2019s troubling to think that at any moment you might open an email that looks like it comes from your employer, a relative or your bank, only to fall for a <a href=\"http:\/\/gizmodo.com\/a-huge-and-dangerously-convincing-google-docs-phishin-1794888973\">phishing scam<\/a>. Any one of the endless stream of innocent-looking emails you receive throughout the day could be trying to con you into handing over your login credentials and give criminals control of your confidential data or your identity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most people tend to think that it\u2019s <a href=\"https:\/\/theconversation.com\/cybersecuritys-weakest-link-humans-57455\">users\u2019 fault<\/a> when they fall for phishing scams: Someone just clicked on the wrong thing. To fix it, then, users should just <a href=\"https:\/\/theconversation.com\/before-decrying-the-latest-cyberbreach-consider-your-own-cyberhygiene-37834\">stop clicking on the wrong thing<\/a>. But as security experts who study malware techniques, we believe that thinking chases the wrong problem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The real issue is that today\u2019s web-based email systems are electronic minefields filled with demands and enticements to click and engage in an increasingly responsive and interactive online experience. It\u2019s not just Gmail, Yahoo mail and similar services: Desktop-computer-based email programs like Outlook display messages in the same unsafe way.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Simply put, safe email is plain-text email \u2013 showing only the plain words of the message exactly as they arrived, without embedded links or images. <a href=\"http:\/\/cromwell-intl.com\/cybersecurity\/html-email.html\">Webmail is convenient for advertisers<\/a> (and lets you write good-looking emails with images and nice fonts), but carries with it unnecessary \u2013 and serious \u2013 danger, because a webpage (or an email) can easily show one thing but do another.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Returning email to its origins in plain text may seem radical, but it provides radically better security. Even the<a href=\"https:\/\/www.us-cert.gov\/\"> federal government\u2019s top cybersecurity experts<\/a> have come to the startling, but important, conclusion that any person, organization or government serious about web security should <a href=\"https:\/\/www.us-cert.gov\/sites\/default\/files\/publications\/AR-17-20045_Enhanced_Analysis_of_GRIZZLY_STEPPE_Activity.pdf#page=53\">return to plain-text email<\/a>:<\/p>\n\n\n\n\n\n<p class=\"wp-block-paragraph\"><b>Misunderstanding the problem<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In recent years, webmail users have been <a href=\"https:\/\/www.consumer.ftc.gov\/articles\/0003-phishing\">sternly instructed<\/a> to <a href=\"https:\/\/www.wired.com\/2017\/03\/phishing-scams-fool-even-tech-nerds-heres-avoid\/\">pay perfect attention<\/a> to <a href=\"https:\/\/www.mcafee.com\/us\/threat-center\/resources\/security-tips-13-ways-to-protect-system.aspx\">every nuance of every email message<\/a>. They pledge <a href=\"http:\/\/www.phishing.org\/10-ways-to-avoid-phishing-scams\">not to open emails<\/a> from people they don\u2019t know. They say they won\u2019t open attachments without careful vetting first. Organizations <a href=\"https:\/\/www.infosecurity-magazine.com\/news\/phishing-awareness-grows-but\/\">pay security companies to test<\/a> if their employees make good on these pledges. But phishing continues \u2013 and is <a href=\"https:\/\/www.scmagazine.com\/email-malware-phishing-and-spam-attempts-hit-new-highs-for-2017\/article\/680281\/\">becoming more common<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">News coverage can make the issue even more confusing. The New York Times called the Democratic National Committee\u2019s email security breach <a href=\"https:\/\/www.nytimes.com\/2016\/12\/13\/us\/politics\/russia-hack-election-dnc.html\">somehow both \u201cbrazen\u201d and \u201cstealthy,\u201d<\/a> and pointed fingers at any number of possible problems \u2013 old network security equipment, sophisticated attackers, indifferent investigators and inattentive support staff \u2013 before revealing the weakness was really a busy user who acted \u201cwithout thinking much.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But the real problem with webmail \u2013 the <a href=\"http:\/\/www.csoonline.com\/article\/2975807\/cyber-attacks-espionage\/phishing-is-a-37-million-annual-cost-for-average-large-company.html\">multi-million-dollar<\/a> security mistake \u2013 was the idea that if emails could be sent or received through a website, they could be more than just text, even webpages themselves, displayed by a web browser program. This mistake created the criminal phishing industry.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Engineered for danger<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A web browser is the perfect tool for insecurity. Browsers are designed to <a href=\"https:\/\/www.theverge.com\/2017\/9\/7\/16257470\/little-snitch-connection-map-app-vpn-utility\">seamlessly mash together content<\/a> from multiple sources \u2013 text from one server, ads from another, images and video from a third, user-tracking \u201clike\u201d buttons from a fourth, and so on. A modern webpage is <a href=\"https:\/\/www.mozilla.org\/en-US\/lightbeam\/\">a patchwork of third-party sites<\/a>, which can number in the dozens. To make this assemblage of images, links and buttons appear unified and integrated, the browser doesn\u2019t show you where the pieces of a webpage come from \u2013 or where they\u2019ll lead if clicked.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Worse, it allows webpages \u2013 and thereby emails \u2013 to lie about it. When you <a href=\"http:\/\/igoro.com\/archive\/what-really-happens-when-you-navigate-to-a-url\/\">type \u201cgoogle.com\u201d into your browser<\/a>, you can be reasonably sure you will get Google\u2019s page. But when you click a link or button labeled \u201cGoogle,\u201d are you actually heading to Google? Unless you carefully read the underlying HTML source of the email, there are a dozen ways your browser can be <a href=\"https:\/\/textslashplain.com\/2017\/01\/14\/the-line-of-death\/\">manipulated to trick you<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is the opposite of security. Users can\u2019t predict the consequences of their actions, nor decide in advance if the potential results are acceptable. A perfectly safe link might be displayed right next to a malicious one, with no apparent difference between them. When a user is faced with a webpage and the decision to click on something, there is no reasonable way to know what might happen, or what company or other party the user will interact with as a result. By design, the browser hides this information. But at least, when browsing the web, you can choose to start at a trusted site; webmail, however, delivers an attacker-made webpage right into your mailbox!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The only way to be sure of security in today\u2019s webmail environment is to learn the skills of a professional web developer. Only then will the layers of HTML, Javascript, and other code become clear; only then will the consequences of a click become known in advance. Of course, this is an unreasonable level of sophistication to require for users to protect themselves.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Until software designers and developers fix browser software and webmail systems, and let users make informed decisions about where their clicks would lead them, we should follow the advice of C.A.R. Hoare, one of the early pioneers of computer security: \u201c<a href=\"https:\/\/www.cs.fsu.edu\/~engelen\/courses\/COP4610\/hoare.pdf\">The price of reliability is the pursuit of the utmost simplicity<\/a>.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><b>Safe email is plain-text email<\/b><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Companies and other organizations are even more vulnerable than individuals. One person needs only to worry about his or her own clicking, but each worker in an organization is a separate point of weakness. It\u2019s a matter of simple math: If every worker has that same 1 percent chance of falling for a phishing scam, the <a href=\"http:\/\/www.statisticshowto.com\/what-is-a-bernoulli-trial\/\">combined risk to the company<\/a> as a whole is much higher. In fact, companies with 70 or more employees have a <a href=\"https:\/\/www.wolframalpha.com\/input\/?i=69+Bernoulli+trials+probability+0.01\">greater than 50 percent chance<\/a> that someone will be hoodwinked. Companies should look very critically at webmail providers who offer them worse security odds than they\u2019d get from a coin toss.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As technologists, we have long since come to terms with the fact that some technology is just a bad idea, even if it looks exciting. Society needs to do the same. Security-conscious users must demand that their email providers offer a plain-text option. Unfortunately, such options are few and far between, but they are a key to stemming the webmail insecurity epidemic.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mail providers that refuse to do so should be avoided, just like back alleys that are bad places to conduct business. Those online back alleys may look eye-pleasing, with ads, images and animations, but they are not safe.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This article was written in collaboration with cybersecurity researcher and developer <a href=\"http:\/\/blog.erratasec.com\/\">Robert Graham<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><i><a href=\"http:\/\/theconversation.com\/the-only-safe-email-is-text-only-email-81434\">This article was originally published on The Conversation.<\/a><\/i><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><br\/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Any one of the endless stream of innocent-looking emails you receive throughout the day could be trying to con you into handing over your login credentials and give criminals control of your confidential data or your identity.<\/p>\n","protected":false},"author":7,"featured_media":45982,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":24,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[106,32,24],"tags":[],"coauthors":[7775],"class_list":["post-28446","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-newsletters","category-opinion"],"acf":{"subheadline":"","legacy_arc_id":"DOBQ7FDVM5CBBGZVY5ADCQPD2M","arc_canonical_url":"\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>The only safe email is text-only email [Commentary] - C4ISRNet<\/title>\n<meta name=\"description\" content=\"Any one of the endless stream of innocent-looking emails you receive throughout the day could be trying to con you into handing over your login credentials and give criminals control of your confidential data or your identity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The only safe email is text-only email [Commentary]\" \/>\n<meta property=\"og:description\" content=\"Any one of the endless stream of innocent-looking emails you receive throughout the day could be trying to con you into handing over your login credentials and give criminals control of your confidential data or your identity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2017-09-11T15:42:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T18:38:16+00:00\" \/>\n<meta name=\"author\" content=\"Sergey Bratus and Anna Shubina, Dartmouth College\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sergey Bratus and Anna Shubina, Dartmouth College\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"The only safe email is text-only email [Commentary]\",\n\t            \"datePublished\": \"2017-09-11T15:42:19+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:38:16+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/\"\n\t            },\n\t            \"wordCount\": 1100,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-487606535.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Daily Brief\",\n\t                \"Newsletters\",\n\t                \"Opinion\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/\",\n\t            \"name\": \"The only safe email is text-only email [Commentary] - C4ISRNet\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-487606535.jpg.jpg\",\n\t            \"datePublished\": \"2017-09-11T15:42:19+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:38:16+00:00\",\n\t            \"description\": \"Any one of the endless stream of innocent-looking emails you receive throughout the day could be trying to con you into handing over your login credentials and give criminals control of your confidential data or your identity.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-487606535.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-487606535.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/2017\\\/09\\\/11\\\/the-only-safe-email-is-text-only-email-commentary\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Opinion\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/opinion\\\/\",\n\t                    \"ad_zone\": \"opinion\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"The only safe email is text-only email [Commentary]\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"caption\": \"C4ISRNet\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The only safe email is text-only email [Commentary] - C4ISRNet","description":"Any one of the endless stream of innocent-looking emails you receive throughout the day could be trying to con you into handing over your login credentials and give criminals control of your confidential data or your identity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/","og_locale":"en_US","og_type":"article","og_title":"The only safe email is text-only email [Commentary]","og_description":"Any one of the endless stream of innocent-looking emails you receive throughout the day could be trying to con you into handing over your login credentials and give criminals control of your confidential data or your identity.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/","og_site_name":"C4ISRNet","article_published_time":"2017-09-11T15:42:19+00:00","article_modified_time":"2026-08-08T18:38:16+00:00","author":"Sergey Bratus and Anna Shubina, Dartmouth College","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Sergey Bratus and Anna Shubina, Dartmouth College","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"The only safe email is text-only email [Commentary]","datePublished":"2017-09-11T15:42:19+00:00","dateModified":"2026-08-08T18:38:16+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/"},"wordCount":1100,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-487606535.jpg.jpg","articleSection":["Daily Brief","Newsletters","Opinion"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/","name":"The only safe email is text-only email [Commentary] - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-487606535.jpg.jpg","datePublished":"2017-09-11T15:42:19+00:00","dateModified":"2026-08-08T18:38:16+00:00","description":"Any one of the endless stream of innocent-looking emails you receive throughout the day could be trying to con you into handing over your login credentials and give criminals control of your confidential data or your identity.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-487606535.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-487606535.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/2017\/09\/11\/the-only-safe-email-is-text-only-email-commentary\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Opinion","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/opinion\/","ad_zone":"opinion"},{"@type":"ListItem","position":3,"name":"The only safe email is text-only email [Commentary]"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-487606535.jpg.jpg","jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/28446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=28446"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/28446\/revisions"}],"predecessor-version":[{"id":28461,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/28446\/revisions\/28461"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=28446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=28446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=28446"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=28446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}