bugtraq - Re: base64

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 26 Sep 2003 14:11:18 -0400
From: Bennett Todd <bet@...ul.net>
To: Alun Jones <alun@...is.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: base64

2003-09-25T16:20:46 Alun Jones:
> > -----Original Message-----
> > From: Bennett Todd [mailto:bet@...ul.net] 
> > Sent: Thursday, September 25, 2003 10:30 AM
> > 
> > Do all this canonicalization before the message hits your
> > attachment type policy enforcement and malware scanner, so they only
> > have to deal with the common forms that everybody handles the same.
> 
> With the obvious disadvantage that we're all reduced to using the
> lowest-common-subset of functionality.

Absolutely.

> Never mind inventing or supporting new features, or adding
> international file naming support, in your new email client,
> because the mail server will strip all of that out, anyway.  I
> don't think that's an appropriate answer.

It's certainly not the appropriate answer for all settings.

Outlaw people from receiving email on Windows, and we can do away
with all this sludge.

-Bennett

Content of type "application/pgp-signature" skipped