Hello Marek, On Sat, 5 Mar 2011 03:20:15 +0100 GMT (05/Mar/11, 9:20 AM +0700 GMT), Marek Mikus wrote:
MM> I am not a developer and as a distributor and support for czech users, I MM> know user's point of view in such cases. But when is message broken MM> (regardless page author or authoring SW) and opening it in browser produces MM> same result, this is understandable behaviour. OK. MM> Maybe Ritlabs could display warning when opening such faulty messages and MM> allow user to select, what to do - even user understand nor MIME nor HTML MM> META TAG. Yes, this would be a good idea. MM> I do not agree with with your statements in rest of message, security can MM> be toy or serious tool and TB is second one. Yes, it conforms RFC and MM> allows workarounds for implementation issues if possible, yes, it does not MM> allow to bypass self's security for attachs like man-in-the-middle, yes, it MM> does not allow to use outdated insecure protocols even users requires it MM> optional, because they know nothing about security and will disable any MM> secure feature immediately when will be limited by it. Security is an option. It should be turned on by default, no doubt. But if I, as an adult user, decide that I want to accept the outdated certificate, then it is my decision. If the result is that my HD gets erased, the email client (and that's what it is, not a security suite) won't be blamed, believe me. But if I decide that I want to take the risk (maybe I know that the stupid sysad forgot to update the cert again), then I don't want an email client (which is not a security suite) tell me that I'm too stupid to make that decision and I "know nothing about security" and nanny me. It's not its place to say that; I find it rather insulting. -- Cheers, Thomas. http://thomas.fernandez.hat-gar-keine-homepage.de/ Message reply created with The Bat! 4.2.36.4 under Windows XP 5.1 Build 2600 Service Pack 3 ________________________________________________________ Current beta is 5.0.0.146 | 'Using TBBETA' information: http://www.silverstones.com/thebat/TBUDLInfo.html
