Address Verification and Full PGP Support

Re:Address Verification and Full PGP Support by jrockway on Wednesday July 25, 2018 @01:35PM (#17611118)

I don't really see this as a major problem. Just grab a reasonable number of bytes and disconnect. If a user does end up wanting to view the full TIFF, just say "this server is probably stealing your private information and you will also go over your storage quota by loading this image". If the user is OK with that, then download the image again.

99% of the time, the image is just a company logo in someone's email signature and takes essentially zero storage space or bandwidth to retrieve at receive time. For the special cases, just warn the user about the implications of downloading the image, and go do it if they ask.

[ Parent | on HN ]

Re:Address Verification and Full PGP Support by bartbutler on Wednesday July 25, 2018 @02:06PM (#17611377)

This is basically the plan. There are some other concerns, notably bandwidth/space and, given it's untrusted input, thinking through all the other ways it could be abused. There will certainly be a byte limit.

[ Parent | on HN ]