[Pan-users] Re: clearing headers?

[Duncan]

David Kelly <address@hidden> posted
address@hidden, excerpted below, on  Fri, 03 Oct
2008 10:24:56 -0500:

> OTOH spammers know it and a lot of spam is in HTML in a plain text
> segment.

Heh, that's why non-white-listed HTML mail gets filtered to trash, here.  
I've long said if the content needs HTML to make it worth reading, it's 
not worth reading in any case, especially when HTML mail (and news) is 
the root of so many security vulns.  How many mail/news-based security 
vulns would have been avoided had the default of certain frequently 
vulnerable mail/news clients been NOT to parse HTML?  (Might as well add 
to that a default of asking the user whether to open or save an 
attachment, only offering save in the case of non-data-only formats like 
executables and Office docs.) All of them?  Certainly most of them.

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman