> Well, the default is now to not mark-up the Subject, but to use the safe
> report format.  We opted to go for "transparent except when it conflicts
> with safety".
> Few things are worse than opening an malicious HTML spam with an unsafe
> mailer that reports to big spam brother that you exist

I don't believe that:

(1) All malicious emails are going to go straight into the "spam" folder, so
you're not going to be accidentally opening them.

(2) If you want to do something with a spam-marked message (like report it
to Razor or check whether it was a false positive) you have to open it
anyway. Having it as an attachment just makes this inconvenient. (I also
have a worry that when I open an attachment, this attachment is being read
of local disk, so OE might think of it as being in a trusted security zone,
so might give it higher permissions than it deserves. I don't know if this
is the case, but I've not wanted to risk it, so have never opened an
attached message).

So, I never defanged MIME in the past, and have turned of "report_safe" now.



PS. Very very sorry! I think I accidentally emailed the entire digest back
to the list. That's because my mouse-button bounced, and the "send" button
appeared at the same screen location as the "reply" button. Very sorry.
Apologies. Ouch.

--
Lucian




-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to