Re: [apps-discuss] update to rfc5965

[Ned Freed <[e-mail]>]

> >Has anyone implemented this?

> Zip with a known password is a convention in the very small malware
> research community, but I haven't seen it anywhere else.

And that's where it should stay. Anything that can be used to
transfer malware to someone who knows how to deal with it can also be
used to transfer malware to someone who doesn't know how to deal with it.

I'm sorry, but the notion of standardizing such a thing is nothing short of
crazy.

> Personally, I don't think that kludges to work around defective
> implementations belong in standards.  The problem is that some
> organizations run mail to their abuse mailbox through spam filters.
> To the extent that a standard should address that at all, it should
> say Don't Do That.

Exactly. We keep trying to use standards in these sorts of convoluted ways to
fix problems that can and should be attacked head-on. This is a losing
proposition.

				Ned