4 ms·
> How can someone build such a feature and not consider the most basic security concerns?
by madeofpalk 6y ago
> How can someone build such a feature and not consider the most basic security concerns?
- stragies 6y agoHow can someone press the "Send" button on a email without checking Subject:, TO:, CC:, and attachment list for plausibility? (A mail-client could contain basic "warn"-lists of credential-holding places, containing a few dozen file names covering 99% of current platforms/programs) And some "advanced" config options to also configure allowed URI schemes.
- madeofpalk 6y agoI think we've kind of established that, especially when it comes to security, that the onus is on the software to set secure and sensible defaults. I do not think an email client accepting untrusted input to automatically attaching any arbitrary file to the email is sensible or secure. > A mail-client could contain but it doesn't.