Thomas G. Madsen skrev:
> Næste version af OE (den der følger med til SP2 til WinXP)
Læs mere her:
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2email.mspx
"Changes to Functionality in Microsoft Windows XP Service Pack 2
Part 4: E-mail Handling Technologies"
"The plain text mode feature of Outlook Express provides users with the
option to render incoming mail messages in plain text instead of HTML.
When Outlook Express is running in plain text mode, the rich edit
control is used instead of the MSHTML control. You avoid some security
issues that result from the use of MSHTML by using the rich edit
control."
Rich edit control bliver også anvendt af notepad, så indtil der udarbej-
des en ny kontrol med bredere funktionalitet, skal man nok forvente
samme begrænsede funktionalitet som i notepad.
Jeg synes at kunne huske at have læst, i en MS-medarbejders blog, at der
bliver arbejdet på problemerne som er nævnt på siden så de er rettet
førend WinXP SP 2 slippes løs.
Jeg har ikke fået læst hele dokumentationen til RC2 endnu, ejheller do-
kumentationen fra MSDN, så jeg ved ikke 100% hvordan OE bliver påvirket
af ikke at anvende komponenter fra IE (mit umiddelbare gæt, er at funk-
tionaliteten med sikkerhedszoner forsvinder, da den funktionalitet er
inbygget i IE og blot "genanvendes" i OE).
> vil temmelig sikkert have en funktion ved navn: 'Block images and
> other external content in HTML e-mail',
Jep:
"Don't Download External HTML Content
Detailed description
This Outlook Express feature helps users to avoid getting repeated spam
mailings by preventing the user from unknowingly validating their e-mail
address to spam originators. Businesses that use spam as a marketing
technique typically include references to images that reside on their
Web servers inside the e-mail message. Some of these spam e-mail
messages contain single pixel images that are not visible to the
recipient of the e-mail so that the recipient will not be aware that
there is any content that is malicious. When the user opened an e-mail
that contains the image, previous versions of Outlook Express
automatically contacted the Web server to download and display the
images. When the request for the image was made to the Web server, it
could ascertain that a spam e-mail message was received by an active e-
mail account, which validated the e-mail address in the spam
originator's mailing list. Now, when the Don't Download External HTML
Content feature is enabled, the default behavior of Outlook Express
changes so that it does not contact the Web server to download external
content, which prevents the verification of the e-mail address with the
spam originator. This download behavior is configurable and is enabled
by default when you install Windows XP Service Pack 2.
This feature also minimizes a common problem that is experienced by
people whose computers use dial-up network connections. Prior to
implementing this feature, if a user downloaded their mail messages and
then disconnected their network connection, when they attempted to view
an HTML messages that included pictures or other external Internet
content, their modem would automatically start to dial out to download
the external content."
Andet relevant fra dokumentet:
"AES API Integration
Description
Outlook Express now integrates a new set of application programming
interfaces (APIs), called the Attachment Execution Service (AES), to
check e-mail attachments. This allows applications to eliminate custom
code that performs similar safety checks and instead rely on this
centrally-managed API set. The use of AES provides a consistent user
experience across all applications that check the security of an
attachment.
Why is this change important?
It is important to have a more unified approach for attachment security
across all Windows applications. This helps to ensure that users get a
consistent experience with regard to the security check performed on
attachments."