3 ms·
Technically email is plaintext, though for the definition you aspire towards, it was in the early days. But then various RFC's added this and that and now emai
by Zenst 8y ago
Technically email is plaintext, though for the definition you aspire towards, it was in the early days. But then various RFC's added this and that and now email processing/sanitisation is scary.
But then email is one large unsanitized input that has so many rules to be applied, what could go wrong.
That's why email attachments alone are an utter MIME-field when it comes to security.
- rjzzleep 8y agoPure gold pun right here: > That's why email attachments alone are an utter MIME-field when it comes to security. And yes, remember the 35C3 talk on e2e email security. https://www.youtube.com/watch?v=kKjtZy87iI0 https://www.youtube.com/watch?v=kKjtZy87iI0
- Zenst 8y ago> https://www.youtube.com/watch?v=kKjtZy87iI0 https://www.youtube.com/watch?v=kKjtZy87iI0 Not seen that, watching now (about half way thru) and nice to retouch upon a feild I've not working in for many years and seeing how not much has changed. Equally a little depressing, to see the same types of problems 10 years on.