Re: security problem in emailing HTML

At 04:22p -0500 12/04/99, Keith Moore wrote:
>  > I don't think that the problem people are complaining about is
>  > primarily a cookies problem;
>
>it's partially a cookies problem; cookies make it easier to leak
>information to parties whose addresses aren't visible in the original
>email.  but there are probably other ways to do it that don't involve
>cookies.

I've been thinking about writing a Perl filter to strip out HTML from email.
Was gonna just delete from <html> to </html>, but then saw that Fingerhut
embeds the plain text version into an HTML comment. I wonder if there are
any other mutations...


-Walter

Received on Monday, 6 December 1999 11:39:06 UTC