Re: Test mail

[Paul Mundt]

On Mon, Jul 30, 2001 at 12:46:18PM +0100, Alan Cox wrote:
> Its more than that. Its the same smug arrogance that is going to get a lot
> of people nasty shocks one day
> 
> ELM, Pine and Mutt have all at various times had holes that could have been
> used to write an exact Unix equivalent of the windows virus. 
> <img src="file:/dev/mouse"> hangs some web browser email 4 years after the
> bug was reported and so on...
> 
This all goes back to opening things blindly, and also ties in the issue of
HTML aware email clients.

Mail clients should simply be dealing with plain text. As soon as things like
HTML support are introduced into the client, you have the same sort of
problems that you do with easily exploitable web browsers.

These things are only an issue when your mail client tries to do things for
you instead of allowing you to do them yourself. HTML emails can simply be
fed through something like a lynx -dump in order to capture their plaintext
output.

Keep HTML where it belongs, on webpages, not mail. If someone wants to send
you an image, they can do so through an attachment.

Regards,

-- 
Paul Mundt <[e-mail]>