Email and browsers shouldn't be glibly equated. Email as it is presently is a constant opening to phishing and spear fishing. Browser exploits are common too b

Email and browsers shouldn't be glibly equated. Email as it is presently is a constant opening to phishing and spear fishing. Browser exploits are common too but it's harder (not impossible) to make them personal. And phishing doesn't have to rely on a browser exploit - a fake login page is enough. It's logical to have a whitelist (or disallow) email links but still allow browsers to follow links.