<DIV>There are SIMPLE mail clients that do not support anything other than plain text and are not vulnerable to the problems that plague the complicated over featured software most users use. Less is more! (more Security that is).</DIV>
<DIV> </DIV>
<DIV>Lori<BR><BR><B><I>jmetz@intac.com</I></B> wrote:</DIV>
<BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">You are looking at the situation as an individual user, I was suggesting<BR>that the mail server do the conversion. The user and sender become<BR>ir-relevant to the process.<BR><BR>The user would only see the end product the message. In the conversion the<BR>senders method is or would be of no consequence because it would be<BR>stopped and converted to a safe message prior to delivery.<BR><BR>As I stated before the mail server would be considered a sacrificial lamb<BR>with an appropriate amount of redundancy that nothing would be lost<BR><BR>The idea of security is to prevent the user from being able to place<BR>themselves in a vulnerable position, that would mean that officials would<BR>only be allowed to use the .gov mail system ,web mail yahoo ,google and<BR>the like would not be allowed for officialdom or any contractors while on<BR>the job.<BR><BR>You simply bar the door from the
web mail or personal mail servers so that<BR>the ips are not accessible while on or near government property<BR><BR>Anyone who violates that basic security should be terminated the same<BR>thing with instant messengers, the portals should be blocked while on<BR>federal property or on any governmental computer.<BR><BR>If the ports are blocked properly the the intruders can't get in to wreck<BR>havoc<BR><BR>If the user has no way to violate security then the systems are kept secure<BR><BR>It always comes down to what price security,,<BR><BR><BR><BR>> On Fri, 05 Nov 2004, jmetz@intac.com wrote:<BR>><BR>>><BR>>><BR>>> one question bothers me in almost every situation all mail (to any<BR>>> Governmental officer) is considered either questionable or often non<BR>>> deliverable to the intended recipient mostly this has been because of<BR>>> the<BR>>> potential of virus/worm delivery.<BR>>><BR>>> Yet in all the years of Email no
one has ever considered mail conversion<BR>>> prior to delivery.<BR>>><BR>>> Why has no one ever setup a system of conversion to pdf in the mail<BR>>> system.<BR>>> This would be one way to insure that real information would be<BR>>> transfered<BR>>> no matter how it was sent.<BR>>><BR>>> A stand alone mail Gateway which automaticly strips all mail html or<BR>>> plain<BR>>> text ( oe even preexisting PDF converting it to pdf and then<BR>>> transposting<BR>>> it to the intended recepient would prevent most worms/virus from ever<BR>>> getting through.<BR>><BR>> I don't see how it can be a solution. People who use bogus email client<BR>> like Outlook Express to display html mails will maybe use a bogus pdf<BR>> viewer. The problem is not with HTML or PDF, it's with people who use<BR>> vulnerable programs, and in a good email client an HTML message is not<BR>> supposed to be able to run
a program.<BR>><BR>> --<BR>> gpg fp: 8a7e 9719 b38d 97c6 6af0 d345 12a0 3708 2c8c 3c11<BR>> http://boklm.mars-attacks.org/<BR>> _______________________________________________<BR>> govsec mailing list<BR>> govsec@attrition.org<BR>> http://www.attrition.org/mailman/listinfo/govsec<BR>><BR><BR>_______________________________________________<BR>govsec mailing list<BR>govsec@attrition.org<BR>http://www.attrition.org/mailman/listinfo/govsec<BR></BLOCKQUOTE>