[Esd-l] Security Warning Message as Attachment

John D. Hardin jhardin at impsec.org
Wed Oct 16 19:56:01 PDT 2002


On Wed, 16 Oct 2002, daniel lance herrick wrote:

> Doesn't the Sanitizer report belong in an
> X-Sanitizer: header? Even OutLook is willing to do
> its mail sorting on the basis of the content of
> headers. The Subject: header is not a suitable
> place for more than a flag.

X-Security.

Outlook may only let you filter on the headers Microsoft deems
interesting, and the X-Security header by itself is not a clear
indication of a problem.

The sanitizer could add an X-Security-Warning: header if a problem is
detected.

Votes? Subject line keyword or X-Security-Warning: header?

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...the Fates notice those who buy chainsaws...
                                              -- www.darwinawards.com
-----------------------------------------------------------------------
   63 days until The Two Towers



More information about the esd-l mailing list