One fundamental flaw, he said, is the relative anonymity provided by the Internet's system of IP addresses, which only identify a user's general location, not a specific computer.
As Apple is using the reply-to address of a message's User Data Header to identify the origin rather than the raw source, receiving iPhone owners risk being fooled by a phishing attack (or just a dishonest acquaintance) that poses as a contact or a company.