Justin Mason writes:
> 
> [EMAIL PROTECTED] writes:
> > Rob McEwen (PowerView Systems) wrote:
> > > Is there ever a legit reason to Base64 encode plain text?
> > 
> > Microsoft Outlook Web Access for Exchange Server 2000 base64-encodes plain 
> > text.
> 
> yep -- I've also seen other Sexchange permutations doing it, too.
> (We had a rule to detect it, but it FP'd because of this.)

oh wait, looks like we don't mind the FPs that much ;)

  rawbody MIME_BASE64_TEXT   eval:check_for_mime('mime_base64_encoded_text')
  describe MIME_BASE64_TEXT  Message text disguised using base64 encoding
  score MIME_BASE64_TEXT 2.048 1.522 2.749 1.885

--j.

Reply via email to