3 ms·
What would be the difference from normal hotlinking in a standard email? The vector in both cases would be being able to send a million emails; a reflection att
by darkwater 6y ago
What would be the difference from normal hotlinking in a standard email?
The vector in both cases would be being able to send a million emails; a reflection attack with spam emails as a vector would be just the same without provider servers doing anything special. MUA opening images would do the attack.
Actually a provider could cache the hotlinked resource and remove almost completely the reflection.
- jjuhl 6y agoUsing only plain-text emails solves the problem nicely. Who'd even want to ever use HTML mail other than shady or clueless or annoying people? Just use plain-text only and the problem is solved.
- darkwater 6y agoYeah, the typical HN/usenet/ML solution to everything: just use plain text, it's good for everyone and nobody needs anything else. Newspapers and books always looked like an RFC document anyway, right?