2023 News
Change in Our Company’s Operation for Emails with Password-Protected Zip Files and Separate Password Notification Emails (PPAP)
November 8, 2023
Regarding the information security measure known as “PPAP,” which involves sending files attached to emails using a password-protected zip file and separately sending the password, our company will make the following changes, as a general rule, to the handling of email sending to IIJGlobal addresses from external parties starting from January 9, 2024.
| Sending emails from our company | Instead of attaching files, we will send a download URL. |
| Receiving emails from outside the company | Password-protected zip files will be filtered and only the email body will be received. ※Please confirm with our representative (the recipient) on how to proceed with file exchange as the sender will not be notified of the deletion. |
We will provide individual instructions to our customers and business partners regarding the new file sharing method mentioned above.
The background behind this change is as follows:
The practice of sending emails with password-protected zip files and subsequently sending the password separately, known as “PPAP” (Password Protected Attachment Protocol), is a commonly used information security measure in Japan. However, it has been found to be ineffective and can bypass virus scans. As a result, the U.S. Cybersecurity and Infrastructure Security Agency also recommends blocking this method.
Considering the potential future occurrence of malware exploiting this mechanism, we have determined that it is necessary to implement measures to protect the information not only for our company but also for our customers and business partners.
We kindly request your understanding and cooperation in this matter.