ietf-822
[Top] [All Lists]

Re: E-mail major cause of bad security says security expert

2002-05-17 07:08:51


ned(_dot_)freed(_at_)mrochek(_dot_)com wrote:

"All of the security and privacy issues on the Web now relate to
e-mail," said Adam Shostack, director of technology at
Zero-Knowledge Systems, a Montreal-based privacy and security
company. "The shame about this behavior is that it's going on
surreptitiously and people are not given an obvious way to opt
out."  [...]

There are multiple ways to parse that statement. One of them is:

   mailprobs = mailprobs + webprobs

which is certainly true for HTML-over-mail, esp with mailers that don't
treat HTML mail specially.

My only comment is that such a clearly incorrect assessment of the
situation isn't worthy of a response. There are plenty of Web security
and privacy issues that have nothing whatsoever to do with email.

Do they apply to HTML mail?

-- 
Eric A. Hall                                        http://www.ehsco.com/
Internet Core Protocols          http://www.oreilly.com/catalog/coreprot/