News for hackers. Stuff that matters.

A comment on Google launches AMP for email. Parent comment

Re:Google launches AMP for email by Zenst on Tuesday March 26, 2019 @03:32PM (#19495250)
Technically email is plaintext, though for the definition you aspire towards, it was in the early days. But then various RFC's added this and that and now email processing/sanitisation is scary.

But then email is one large unsanitized input that has so many rules to be applied, what could go wrong.

That's why email attachments alone are an utter MIME-field when it comes to security.

[ Parent | on HN ]
Re:Google launches AMP for email by rjzzleep on Tuesday March 26, 2019 @03:53PM (#19495411)
Pure gold pun right here:

> That's why email attachments alone are an utter MIME-field when it comes to security.

And yes, remember the 35C3 talk on e2e email security.

https://www.youtube.com/watch?v=kKjtZy87iI0

[ Parent | on HN ]
Re:Google launches AMP for email by Zenst on Tuesday March 26, 2019 @04:32PM (#19495752)
> https://www.youtube.com/watch?v=kKjtZy87iI0

Not seen that, watching now (about half way thru) and nice to retouch upon a feild I've not working in for many years and seeing how not much has changed. Equally a little depressing, to see the same types of problems 10 years on.

[ Parent | on HN ]