lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20030926181118.GB6827@rahul.net>
Date: Fri, 26 Sep 2003 14:11:18 -0400
From: Bennett Todd <bet@...ul.net>
To: Alun Jones <alun@...is.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: base64

2003-09-25T16:20:46 Alun Jones:
> > -----Original Message-----
> > From: Bennett Todd [mailto:bet@...ul.net] 
> > Sent: Thursday, September 25, 2003 10:30 AM
> > 
> > Do all this canonicalization before the message hits your
> > attachment type policy enforcement and malware scanner, so they only
> > have to deal with the common forms that everybody handles the same.
> 
> With the obvious disadvantage that we're all reduced to using the
> lowest-common-subset of functionality.

Absolutely.

> Never mind inventing or supporting new features, or adding
> international file naming support, in your new email client,
> because the mail server will strip all of that out, anyway.  I
> don't think that's an appropriate answer.

It's certainly not the appropriate answer for all settings.

Outlaw people from receiving email on Windows, and we can do away
with all this sludge.

-Bennett

Content of type "application/pgp-signature" skipped

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ