Hacker News new | ask | show | jobs
by swiley 3445 days ago
Far better would be to not render HTML emails at all. They're an abomination and have always been causing security problems of different kinds.
1 comments

> All programs will attempt to expand until they can render HTML emails. Those that cannot will be replaced by those that can.

More seriously, the expectation that emails will consist only of plain text is simply untenable. From a security standpoint this is obviously not ideal, but security and usability are opposed, and if your security scheme does not allow users to send documents with some form of markup, it will not be widely used.

Emails had a form of markup before HTML emails came, it was the inspiration for markdown.