4 ms·
How can someone press the "Send" button on a email without checking Subject:, TO:, CC:, and attachment list for plausibility? (A mail-client could contain basi
by stragies 6y ago
How can someone press the "Send" button on a email without checking Subject:, TO:, CC:, and attachment list for plausibility?
(A mail-client could contain basic "warn"-lists of credential-holding places, containing a few dozen file names covering 99% of current platforms/programs)
And some "advanced" config options to also configure allowed URI schemes.
- madeofpalk 6y agoI think we've kind of established that, especially when it comes to security, that the onus is on the software to set secure and sensible defaults. I do not think an email client accepting untrusted input to automatically attaching any arbitrary file to the email is sensible or secure. > A mail-client could contain but it doesn't.