3 ms·
Exchange ought to have the capability of rewriting the links' hrefs to a "link gateway" where a sandboxed renderer presents the outside page, maybe running over
by chasil 1y ago
Exchange ought to have the capability of rewriting the links' hrefs to a "link gateway" where a sandboxed renderer presents the outside page, maybe running over rdp and purged after the end of every session.
The local Blink (or WebKit) renderer should be for internal or white listed sites only.
- pixl97 1y agoThere are vendor solutions that do just this, converting all links to some kind of proxy service.
- mr_mitm 1y agoAnd then what? The end goal of phishing is either that the victim enters credentials or downloads a malicious file. Neither of which would be prevented by your scheme (even anti virus products are imperfect). Phishing with the goal of exploiting a zero day in the browser are exceedingly rare.