undefined | Better HN

0 pointsmirimir7y ago0 comments

And when my email client doesn't fetch remote content, it will be a problem :)

So maybe I'll be replying "Why did you send me an empty message?"

And maybe some email list software will have the same problem.

0 comments

But the email is readable, it has a link to a message online. It is not a change to the standard, since it's in the body, where you can write whatever you like. In fact, it's not even unprecedented, because Cisco has been offering this exact same type of system for years generally for PHI and other sensitive uses.

jasonjayr7y ago

My bank send me a "Secure Cisco Message". That I think was In response to a web message support request. They didn't tell me in what form to accept the response.

It was a message with instructions to save the .html attachment to your hard drive and open it there. It included tons of obfuscated Javascript.

Without opening the message I replied back and told them "Nope. We're not going to communicate this way, this is irresponsible and dangerous."

voltagex_7y ago

Yep, they couldn't have made that message look more like phishing if they tried - including poor HTML formatting of the email body. This is how you really know that GPG has failed.

behringer7y ago

Please understand, I never said the Secure Cisco Message was actually good lol

mirimirOP7y ago

A URL, or embedded content as part of HTML?

If it were just a URL, even an HTML-enabled client would show just the link. I assumed that it must be embedded content, which would be rendered as a normal-looking message.

Maybe it's both. But even so, I'd just see the link. And generally, I ignore blank messages containing links.

Also, it's not uncommon for email list software to strip HTML, and I doubt that it would decode the HTML before doing so.

ddingus7y ago

How do you even use a mailing list properly with this going on?

The big deal here is users do not get copies of content, instead notifications content is, or may be available.

And that's then. What about searching mail archives? You know just that sort of thing being just a little broken is not an accident.

Or it changes.

"You told me to fuck off"

"Prove it"

Message says hugs and kisses.

That's gonna happen. Count on it, with lame screenshot battles being "proof."

ddingus7y ago

That's my planned reply.

j / k navigate · click thread line to collapse

0 comments

behringer7y ago

jasonjayr7y ago

My bank send me a "Secure Cisco Message". That I think was In response to a web message support request. They didn't tell me in what form to accept the response.

It was a message with instructions to save the .html attachment to your hard drive and open it there. It included tons of obfuscated Javascript.

Without opening the message I replied back and told them "Nope. We're not going to communicate this way, this is irresponsible and dangerous."

voltagex_7y ago

Yep, they couldn't have made that message look more like phishing if they tried - including poor HTML formatting of the email body. This is how you really know that GPG has failed.

behringer7y ago

Please understand, I never said the Secure Cisco Message was actually good lol

mirimirOP7y ago

A URL, or embedded content as part of HTML?

If it were just a URL, even an HTML-enabled client would show just the link. I assumed that it must be embedded content, which would be rendered as a normal-looking message.

Maybe it's both. But even so, I'd just see the link. And generally, I ignore blank messages containing links.

Also, it's not uncommon for email list software to strip HTML, and I doubt that it would decode the HTML before doing so.

ddingus7y ago

How do you even use a mailing list properly with this going on?

The big deal here is users do not get copies of content, instead notifications content is, or may be available.

And that's then. What about searching mail archives? You know just that sort of thing being just a little broken is not an accident.

Or it changes.

"You told me to fuck off"

"Prove it"

Message says hugs and kisses.

That's gonna happen. Count on it, with lame screenshot battles being "proof."

ddingus7y ago

That's my planned reply.

j / k navigate · click thread line to collapse