Email link phishing: why your email app should always show the URL

Authentication standards prevent spoofing but not link-based phishing. A proposal to always display URLs in email links, with analysis of alternatives and trade-offs.