-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Ricardo,

@23 April 2002, 19:38:01 -0300 (23:38 UK time) Ricardo M. Reyes wrote
in [EMAIL PROTECTED]">mid:[EMAIL PROTECTED]

> ok, I get it. Although I think it should be optional, because I see
> it as a privacy problem, and not a really big "security problem".
> The current behavior should be the default, but I would like to have
> the option of seeing the mails complete. don't you?

It's more of an issue than that!!!

Here's the thing. Email is off-line. HTTP GET protocol is online and
the responsibility of a web browser and web browser technology. Email
programs that allow you to use GET technology to read images that
reside on servers (because that's what actually has to be done to show
these images) usually resort to calling the installed browser APIs to
do it "by proxy".

HH>> The sender of this mails can set and read cookies with
HH>> this webbugs.

> Are you sure they can do that?

Not only can they, they *do*.

> I know they can track the request of the image, but I don't know
> about the cookies.

They can do both, since the "GET" has to defer to a full-scale browser
call to do the job and opens *all sorts* of holes in your system.

> that's one of the reasons I switched to TB from Outlook

I do know that the guys at RIT have been looking at ways of
downloading out-of-line images but it will be on an "approve per
image" basis.

Let's face it, you'll get a much better rendition of *that*
sophisticated an HTML message by double clicking on it and launching
it in a browser window <g>.

- --
Cheers -- .\\arck D. Pearlstone -- List moderator
SB! v1.60d/iKey1000-5523848F0B1 on Windows 2000 5.0.2195 Service Pack 2
·
-----BEGIN PGP SIGNATURE-----

iD8DBQE8xeY2OeQkq5KdzaARAgo1AKCykfDkU1KIw5sQUE5d1/XIkCFztACg45i/
uPoAh6IMW5XSsw208e59vDg=
=20Pf
-----END PGP SIGNATURE-----



________________________________________________________
Current Ver: 1.60c
FAQ        : http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]

Reply via email to