Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Firefox > Thunderbird - HTML mail dangerous?

Reply
Thread Tools

Thunderbird - HTML mail dangerous?

 
 
DN
Guest
Posts: n/a
 
      04-15-2006
My understanding is that HTML email poses a security threat to a recipient
receiving it. I've started using Thunderbird but have some questions about
how it handles HTML mail. HTML mail that I receive all has a yellow
background but I can see the original format by going to view->message
body->original HTML. When I view mail and it has a yellow background, is
the HTML being interpreted/displayed by Thunderbird at all?

Should I be concerned about HTML mail in Thunderbird or has Thunderbird
closed HTML mail security holes?

Thanks.
 
Reply With Quote
 
 
 
 
Moz Champion (Dan)
Guest
Posts: n/a
 
      04-15-2006
DN wrote:
> My understanding is that HTML email poses a security threat to a recipient
> receiving it. I've started using Thunderbird but have some questions about
> how it handles HTML mail. HTML mail that I receive all has a yellow
> background but I can see the original format by going to view->message
> body->original HTML. When I view mail and it has a yellow background, is
> the HTML being interpreted/displayed by Thunderbird at all?
>
> Should I be concerned about HTML mail in Thunderbird or has Thunderbird
> closed HTML mail security holes?
>
> Thanks.



HTML does not pose a 'threat' - if it did, the web would close down <g>
it runs on HTML.

I always accept HTML mail and in over nine years on the internet have
yet to run into anything bad because of it.

Some 'claim' that spammers can use HTML to verify your address. While it
is 'possible' it occurs about 10 out of 10,000 spam messages, or about
once a year for most users.

Thunderbird gives you the option to view only in plain text, if that
concerns you tho. If you choose such, then the HTML is ignored.
View-->Messages-->As Plain Text

Thunderbird also gives you an option to 'sanitize' HTML from messages it
(or you) has identified as spam

Tools-->Junk Mail Controls
X When displaying HTML messages marked as junk, sanitize the HTML

HTML message disply with a yellow background for you because you have
told Thunderbird to do that

[Thunderbird-->Preferences]*-->Display [Formatting]
When displaying HTML message use the following

*varies by OS
Windows
[Tools-->Options]
Linux
[Edit-->Preferences]
Mac as above
 
Reply With Quote
 
 
 
 
Miller
Guest
Posts: n/a
 
      04-16-2006
*Moz Champion (Dan)* wrote on 16.04.06 01:25:

> Thunderbird gives you the option to view only in plain text, if that
> concerns you tho. If you choose such, then the HTML is ignored.
> View-->Messages-->As Plain Text


There's also a nice extension out there, which gives you a
toolbar-button to toggle HTML on and off:
http://www.tom-cat.com/mozilla/exten...tml#togglehtml

HTH, BM
 
Reply With Quote
 
John Thompson
Guest
Posts: n/a
 
      04-16-2006
On 2006-04-15, DN <> wrote:

> My understanding is that HTML email poses a security threat to a recipient
> receiving it. I've started using Thunderbird but have some questions about
> how it handles HTML mail. HTML mail that I receive all has a yellow
> background but I can see the original format by going to view->message
> body->original HTML. When I view mail and it has a yellow background, is
> the HTML being interpreted/displayed by Thunderbird at all?
>
> Should I be concerned about HTML mail in Thunderbird or has Thunderbird
> closed HTML mail security holes?


Most html mail exploits have been aimed at Outlook users, for a variety of
reasons (market share, tight integration with the underlying OS means a
successful exploit can give the attacker access to anything on the
machine, autoexecution of attachments, etc.), but html mail
with Thunderbird can still be a problem. Some spammers and other low-lifes
put web bugs in their html messages so that when they are opened, the
spammer will know and can extract your IP address from the GET request for
the web bug. You can eliminate this with Thunderbird at least by disabling
loading of remote images or by using an obfuscating proxy (e.g. "tor") to
disguise your IP address.

--

John ()
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Exporting Thunderbird profile to .... Thunderbird attila001122 Firefox 0 06-06-2008 07:22 PM
Thunderbird wraps plain text replies but not Opera Mail HTML replies janet Computer Support 11 12-17-2007 01:00 AM
Thunderbird Mail "Mail Washer" wc Firefox 3 07-26-2005 03:59 AM
Problem with System.Web.Mail.MailMessage and HTML mail =?Utf-8?B?TWlja2VCb3k=?= ASP .Net 1 06-21-2005 06:11 AM
Thunderbird 1.0 install over Thunderbird 0.8 mapmaker Firefox 4 03-05-2005 12:16 AM



Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57