Kim Kimball wrote:
> If I abandon use of system:anyuser, except for lookup, does that get the
> job done?
> 
> It seems to me that this forces all connections capable of fetching data
> to be authenticated.  If I'm reading the alert correctly, this would
> prevent FetchStatus exploit?
> 
> Kim

Lookup is performed via FetchStatus

Jeffrey Altman


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to