Not sure what you mean by "a security feature" but it sounds like you are agreeing with the original post about the cmd prompt zone awareness being a security "problem" (not feature.)

It is not, for the very reasons you state. If the user is going to follow those detailed instructions, then they would follow the one that says "press OK when the box thingy tells you that you have to approve this" and they will. Or if they tell you to save it on a FAT drive where the zone info won't be saved. Or whatever. Besides, if it is through email, then they would have to change the default settings of OE in SP2 anyway, because they would not be able to save it otherwise. You guys are just trying to find stuff wrong with SP2, just like the author said.



[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/265/28460#28460