HTML mail (Incredimail)

HTML mail (Incredimail)

Posted Sep 24, 2004 15:14 UTC (Fri) by Duncan (guest, #6647)
In reply to: Internet Task Force Shuts Down Anti-Spam Working Group (eWeek) by nix
Parent article: Internet Task Force Shuts Down Anti-Spam Working Group (eWeek)

HTML formatted mail? Here, I dump any mail that's HTML formatted.

I contend that content worth reading is worth reading in plain text, and
that therefore, the only folks using HTML formatted mail are either (1)
deliberate crackers, (2) spammers trying to make worthless content look
impressive, or get it past spam filters, or (3) technical illiterates that
know no better and are thus not a very productive use of my time anyway.
I have instructions in both my mailing list sig and newsgroup sig (and
custom headers) saying no HTML mail, it's trashed. All friends and
relatives corresponding with me know they can't use HTML format as well.

When most of the desired stuff you get is known not to be HTML, just the
fact that something /is/ HTML becomes a good anti-spam filter in itself.
As I said, HTML mail is used to good effect by the crackers and spammers,
so forcing them to use plain text (not just a plain text version and an
HTML version, but /only/ a plain text version) seriously screws their
current operating methods.

Thus, if Incredimail includes HTML, it'd be filtered off the top. Even if
there are a few false positives by this method, they by definition are of
low enough value, due to the class of people using HTML and their effect
on my time vs the chance it might be a false positive, I don't care if I
don't see them.

Again, think about it. If the content is worth reading, it's worth
reading in plain text. If not, putting it in HTML won't /make/ it worth
reading, and given all the cruft that /is/ HTML mail, it's not worth the
trouble making the distinction between the cruft and not. Consider how
many vulns Outlook and OE have been exposed to, and how many they /would/
have been exposed to if they had stuck to plain text. That's enough of a
security argument right there.

I have no problem with HTML on the web, where it belongs. Just don't put
it in my mail, if you want me to read it, because IMO that's /not/ where
it belongs.

Duncan

---

to post comments