Subscribe

Sign up to get the Inside Skinny on Epostmarks happenings


Categories
Twitter Feed

Epostmarks Tweets

    Follow Epostmarks on Twitter
    Loading..
    Loading..

    The Modern Wisdom of Epostmarks

    Tuesday
    24Nov2009

    Epostmarks Launches Postmarked Email

    New Email Service Offers Protection from U.S. Postal Service  

    ROCHESTER, New York - November 24, 2009 - Epostmarks today introduced Postmarked Email, which combines the protection of the U.S. Postal Service® (Postal Service™) with Goodmail’s CertifiedEmail platform. Postmarked Email safeguards email messages using United States Postal Service Electronic Postmark® (USPS EPM®) technology; an auditable time-and-date stamping service that verifies the authenticity of electronically transmitted documents and files. The combination of CertifiedEmail and EPM® provides legally compliant email messaging, and is fully protected by the Postal Service, the most trusted U.S. government agency.  The business benefits also include cost savings, improved green score cards, and increased consumer trust in online communications.

    Nearly 75 percent of all U.S. citizens are now online, making business-related email convenient for most people, especially for transactional messages such as bills, statements, and notifications. Until now, use of email messaging for private and business matters has largely been avoided due to inherent trust problems related to electronic transmission of private or sensitive messages. With the increasing amount of client communications required by federal laws regulating the financial services, telecommunications, and utilities industries, there exists a significant market need for a trusted electronic delivery method.

    “Postmarked Email lets you send email with all the confidence of paper mail” said Jason Curtis, CEO of Epostmarks, Inc. “By combining the legal strength and enforcement of the U.S. Postal Service with Goodmail’s CertifiedEmail platform, a new benchmark for trust has been established in email.”

    Postmarked Email appears with CertifiedEmail’s widely recognized Blue Ribbon icon in a user's email inbox, and allows protected email to display the widely recognized Postal Service™ eagle logo, enabling users to easily identify Postal Service™ protected email. Electronically tampering with USPS EPM® protected email carries a similar penalty to tampering with traditional mail. By extending legal protections and enforcement to email that are commonly found with traditional mail service, Postmarked Email sets the stage for a new era of greater trust in email messages.

    We are very excited to work with Epostmarks who created such an innovative application of the Electronic Postmark with Goodmail Systems,” said Gregory S. Crabb, Inspector in Charge, Revenue Fraud and Cyber Intelligence, U.S. Postal Inspection Service. “With the federal authority and protection of the Postal Service, Postmarked Email will bring a new level of trust to electronic communications, ensuring a safer online experience for U.S. citizens.”

    Email as a business and transactional tool has traditionally lacked trust in the public eye due to phishers and hackers executing highly publicized online fraud. Postmarked Email eliminates fraud by sending a cryptographically secure token that ensures the authenticity of a message. And, the protection of the Postal Service™ adds a greater level of trust enabling a safe, secure method for digital communications. 

    “Consumer concerns around trust and privacy have slowed adoption of email as the primary way that businesses speak to their customers” said Peter Horan, CEO of Goodmail Systems. “But with EPM® technology, Postmarked Email solves these challenges, offering a comprehensive approach to security and trust that will allow businesses to reduce their cost of communications while also strengthening their relationship with their consumers.”

    Postmarked Email is available everywhere Goodmail’s CertifiedEmail is available (via AOL, Comcast, MySpace, Cox, Verizon, Yahoo and others).

    Wednesday
    04Nov2009

    .POST sponsorship agreement available for public comment

    ICANN recently announced that an agreement with the Universal Postal Union (UPU) had been reached for the provision of the .POST TLD (top level domain). For those not familiar with the global postal industry, the UPU is responsible for setting the rules for the universal network of international postal mail exchanges. One of the world’s oldest intergovernmental organizations (IGOs), the UPU has made another significant step toward embracing and ultimately benefiting the global digital economy by recognizing the autonomy and mission of ICANN despite it's relative youth. 

    I've been hearing about this TLD for quite a few years now and am happy that .POST is likely here for good. The potential of this concept, while often exaggerated, is serious. .POST represents another method for Posts to establish trustworthy destinations online, further expanding their trusted framework for global exchange. The summary of contractual provisions references the UPU special status at ICANN. I find that juxtaposing this special status at ICANN with the special legal authority that Posts have in their native country makes this decision seem inevitable.

    Public comment on the idea is going on until the end of November. Check out the details and comment here: http://www.icann.org/en/announcements/announcement-02nov09-en.htm


    Saturday
    09May2009

    Why the US Economy Needs PostmarkedEmail

    Since email’s modest beginnings as an academic tool it has become the cornerstone business communication and commerce medium, preferred even over Web portals. Despite its history, current significance, and future promise, the modern world threatens email’s integrity, reliability, and efficacy.

    Today, the estimated annual cost of spam and phishing combined exceeds $113 billion in direct monetary and non-monetary losses. This recurring cost to the US economy is nothing short of astounding. Despite efforts from both government and private industry independently, the costs associated with spam and phishing continue to grow. After spending almost a decade researching spam and phishing, and doing business with experts in the private and public sectors, I believe a public-private partnership that incorporates the U.S. Postal Service Electronic Postmark (EPM) platform is one of the best methods of mitigating the negative impacts of spam and phishing while contributing to a sustainable U.S. economy. Our supporters agree although it will take significant time and hard work by many for this to work effectively.

    A necessary element for this service to run properly includes a tokenization platform that enables delivery and receipt of multiple classes of email within the existing email ecosystem. Internet Service Providers (ISPs) such as AOL and Yahoo! that adopt the platform guarantee the delivery and full functionality of these various classes of email by allowing them to bypass filters used to block spam and phishing emails. This enables a valuable way for the trusted brand and legal enforcement of the U.S. Postal Service (USPS) to extend into email.

    I believe that the service described above, which Epostmarks named PostmarkedEmail, has the potential to save the U.S. economy billions annually. In addition to cost savings, I believe that national implementation of the PostmarkedEmail service will create new jobs and provide existing employees with modern skills, particularly within the USPS.

    In prior articles, I elaborated on the costs to consumers and businesses due to spam and phishing.

    Saturday
    25Apr2009

    What is the Value of Trusted Email to the U.S. Economy

    One of my duties at Epostmarks is to evangelize about our service and describe how rosy the future will look when the U.S. Postal Service participates to protect email. A question I’ve been asked—albeit infrequently—surrounds the need for such a service. I’ve written this essay as a response to these questions. I believe that despite its history, current significance, and future promise, the current state of affairs threatens email’s integrity, reliability, and efficacy. Furthermore, I believe the best way to combat this regression is through a public-private partnership with national postal operators (in particular the U.S. Postal Service).

    What’s the Problem?

    Email has established itself as the most successful application on the Internet. Adopted even more than web portals and search nearly everybody on the Internet uses email. Its ubiquity verifies its popularity and you can find email everywhere. Email’s uses go far beyond sending letters back and forth, I have seen email used as a verification of identity, as a file storage medium, as a notification mechanism.

    So why among all these robust features and uses does email face issues large enough to endanger its very existence? When you intersect: 1) email was designed as an academic tool, without serious consideration to what it might evolve into; with, 2) the most unsophisticated among us use email, you get a huge opportunity for fraud and criminal activity.

    Far from the conspiracy theorists reality, big brother is not watching. This means they aren’t watching what you do and they aren’t watching what criminals do to you so most get away scot free. Today, the estimated annual cost of spam and phishing exceeds $113 billion in direct monetary and non-monetary losses combined. This recurring cost to the US economy is nothing short of astounding and continues to grow.

    How do we fix it?

    I propose that the best way to reduce unwanted email fast is to create a closed loop, trusted system. One element that enhances the trust of a system from beginning to end is to know the identity of senders. Once you know who the senders are, reducing bad behavior becomes orders of magnitude easier.

    Once the identity of a sender is known to a trusted authority (i.e. the Post Office) then the senders can associate that identity with any messages they send. In the vision we’ve developed at Epostmarks, a sender’s identity would get associated through the use of a cryptographic token affixed to each message sent. That means that every message has its own unique identifier associated with the sender’s credentials.

    You might ask “What about privacy?” When asking the question, keep in mind the difference between privacy and anonymity. There is a natural tradeoff between anonymity and accountability but that should not contravene privacy. There is no reason for a reduction in privacy just because legitimate senders are being held accountable for their actions.

    I have found when discussing the future with many, their internal pessimist moves up to the front of their personality and does all the talking. Expectations get set too high for what is necessary and perfection becomes the goal instead of something actually achievable. When discussing a solution involving the postal service I believe the goal should be to create a system that provides as much trust or more trust than the mail does today. I will add that this is no easy feat; the U.S. Postal Service is the most trusted government agency and has been for years running. The concepts discussed here achieve that goal though. We will have a system where anyone can choose to participate, fraud is virtually eliminated and business can flourish.

    In the next few articles I will elaborate on the costs to consumers and businesses due to lack of trust in the current email system.

    Saturday
    04Apr2009

    The True Corporate and Consumer Cost of Phishing

    Beyond the $108.8 billion annual U.S. cost of spam, a more malicious type of spam, phishing, has its own set of costs. In 2009, phishing is projected to cost the U.S. economy over $8.4 billion annually, $2.6 billion of which will be non-monetary and $5.8 billion in direct monetary losses. To give you an idea of the growth of this problem, 2007 direct financial losses due to phishing only amounted to $3 billion. Over the past three years, more than 2,000 brands across 30 countries have been harmed in order to defraud even the most cautious citizens educated about phishing.

    The growing severity of phishing attacks and average volume of emails consumers and employees receive are both impetus for a more effective method of identifying trustworthy (and untrustworthy) emails. 

    Monetary Cost

    This year, the projected financial cost of phishing is at least $5.8 billion, up from $3.2 billion lost by 6 million adults (or 3.3% of phishing email recipients) in 2007. The number of phishing victims in 2007 rose drastically from 2.3 million (or 2.3% of phishing email recipients) in the prior year. The average loss per successful phishing attack was $886 in 2007. In 2008, phishing activity averaged around 1 in 244.9 (0.41%) emails. A total of 124 million U.S. online adults received or believe they’ve received a phishing email in 2007 with an average of 80 phishing attempts per online adult annually. Our research indicates that the volume of phishing averaged .53% between 2007 and 2008, and has remained relatively constant despite technological and enforcement efforts

    Non-Monetary Corporate Cost

    As a result of the 3.6 million reported annual phishing cases, at least $800 million in direct employee time is lost in handling claims, conducting investigations, and reimbursing victims. This estimate does not include the cost of prosecutions or other enforcement measures.

    Non-Monetary Consumer Cost

    The total annual non-monetary consumer cost of phishing is estimated at $1.8 billion. Of the 3.6 million annual email fraud cases, roughly 85% incurred minor non-monetary costs, totaling roughly $450 million in lost time. The remaining $1.35 billion annual cost is generated by 15% of the cases incurring significant non-monetary costs. Losses are due to one or more of the following in each case:

    • denied credit or other financial service;
    • lost time to resolve problems;
    • debt collector or creditor harassment;
    • criminal investigation, arrest, and conviction;
    • civil suits filed or judgment entered;
    • denied employment or job loss.

    Assuming a modest increase in fraud reports since 2002, this figure is likely to be much higher today.