Richard Head wrote:
> "George Coulouris" <[EMAIL PROTECTED]> wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>
>>Richard Head wrote:
>>
>>>"George Coulouris" <[EMAIL PROTECTED]> wrote in message
>>>[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
>>>
>>>
>>>>Chris Lee wrote:
>>>>
>>>>
>>>>>It would be nice to be able to select a folder of mail or a few mails
>>>>>and right click and 'collect addresses to address book' This pops up a
>>>>>dialogue with a drop down of available address books and a text entry
>>>>>area for a new one. This way addresses can be collected manualy and
>>>>>sorted into appropriate books.
>>>>>
>>>>>
>>>>>
>>>>It would be nice if we learned from Outlook's mistake and turned address
>>>>collection off by default.
>>>>
>>>>
>>>I find it useful to have it turned on.
>>>Which mistake?
>>>
>>In my opinion, having such collection enabled by default is a security
>>risk that enables the propagation of SirCam and friends. Though I
>>suppose Mozilla is more sane in that it doesn't enable javascript for
>>mail and news by default.
>>
>
> would you prefer not to maintain any sort of address list?
>
>
One of the first things I do when configuring mozilla (or outlook
express, for that matter) is to disable address collection. I'm not
saying that the feature isn't useful or that it should be removed, I'm
just of the opinion that software should ship with conservative default
settings with respect to security. This is of particular concern to
mozilla, since its codebase runs on so many platforms. At least SirCam
only buggers windows boxes; a future hole in mozilla could affect lots
of architectures.
