[Mimedefang] Re: [SURBL-Discuss] Fw: Interesting Phishing Trick

Kenneth Porter shiva at sewingwitch.com
Fri Mar 17 11:19:36 EST 2006

Saw this cross the SpamAssassin list today:


Apparently a lot of legitimate mail has anchors with HTTP/HTTPS mismatch 
between the URL in the anchor's href and the URL in the body of the anchor.

I thought that instead of rejecting poor HTML, one could also use MD's 
reassembly feature to wrap invalid HTML with the validation report, 
including a warning at the top of any mismatches like this. PHB's would 
still get their pretty HTML, with a nice ugly report up front telling them 
how bad it is under the hood, and why it's hard to tell it from spam.

More information about the MIMEDefang mailing list