Swisscom bills / a crime-pusher
hello everyone,
a little note dedicated to the person who created the layout of the email regarding the latest invoice (April-May 2023).
the email is digitally signed (S/MIME) and that’s fine. 😎
but, two negative feedbacks:
- the email, concerning its text part, is only in HTML, of which here are the first lines of the code:
<!doctype html>
<html xmlns=“http://www.w3.org/1999/xhtml” xmlns:v=“urn:schemas-microsoft-com: vml” xmlns:o=“urn:schemas-microsoft-com:office:office” lang=“en”>
<head>
<meta http-equiv=“content-type” content=“text/html; charset=utf-8”>
<meta content=“text/css;charset=utf-8” http-equiv=“Content-Style-Type”>
<meta http-equiv=“X-UA-Compatible” content=“IE=edge,chrome=1”>
<meta name=“generator” content=“AEM Forms Editor”>
<meta name=“x-apple-disable-message-reformatting”>
<meta name=“viewport” content=“width=device-width, initial-scale=1.0”>
<style type=“text/css”>
whereas for reasons of compatibility and security (e-mail clients do not natively display HTML, for example), it is recommended to send missives simultaneously in plain text and HTML, as Thunderbird can very well do.
- second, more serious point: inviting the customer to click on links found in the email… whereas cybersecurity specialists recommend never clicking on one or more links found in a company’s message known (or unknown), but to go directly to your customer area from your browser by typing the URL in the address bar (or in bookmarks/favorites).
hoping to have helped the accounting department a little.
