HTML by default in KMail

[Markus Slopianka]

On Friday 06 August 2010 16:09:48 Scott Kitterman wrote:
> That doesn't help with a (at
the point theoretical) malware threat that
> works off of a KHTML flaw to compromise the
user's session.

How would an attack without JavaScript even work? Is that possible at
all?


> I think the current "click here to see the html" approach is easy enough
> and
a reasonable default.

If you are willing to train our users to always "click here"
without thinking twice, you're right.