Conversation
Notices
-
Bob Mottram 🔧 ☕ ✅ (bob@soc.freedombone.net)'s status on Thursday, 28-Jun-2018 05:20:00 EDT Bob Mottram 🔧 ☕ ✅
The problem with HTML emails
https://blog.hboeck.de/archives/894-Efail-HTML-Mails-have-no-Security-Concept-and-are-to-blame.html-
Bob Mottram 🔧 ☕ ✅ (bob@soc.freedombone.net)'s status on Thursday, 28-Jun-2018 05:24:31 EDT Bob Mottram 🔧 ☕ ✅
"Ideally you'd have an RFC specifying a subset of HTML and CSS that is allowed within HTML mails. This would have to be a whitelist approach, because the rapidly changing nature of HTML makes it almost impossible to catch up. However no such RFC exists."
-