[Mimedefang] OT: HTML mail

[Arthur Corliss]

On Thu, 31 Mar 2005, -ray wrote:

>
> We're thinking about switching to horde for campus webmail, and i'm
> getting some "pressure" to turn on inline html mail, which is off by
> default in horde.  It's on in our current webmail, which is why they think
> we "need" it.
>
> Can someone point me to a good webpage that details the security problems
> of html mail?  A little googling turned up some of the minor problems like
> bandwidth, rendering, speed, etc, which IMO are all secondary to security.
> Thanks.

Check out OpenWebmail (http://www.openwebmail.org/) which has some good
features for making HTML mail safe (disabling javascript, web bugs, etc.).

	--Arthur Corliss
	  Bolverk's Lair -- http://arthur.corlissfamily.org/
	  Digital Mages -- http://www.digitalmages.com/
	  "Live Free or Die, the Only Way to Live" -- NH State Motto