Outlook should allow trusted senders to send file types otherwise.

[dave_h]

Outlook secruity could address the file attachment problem without using the
knuckle dragging sledge hammer approach Outlook 2003 does by blindly blocking
all attachments of a specific file type. When a message arrives, Outlook
could chack the address book, and one of the properties of some members of
the address book could be a "trusted sender" status. If the sender is
"trusted", then allow the attachment in. If not, then either allow the
attachment to be quarantined in a directory (if selected as a security option
which does not allow execution) or could be blocked and discarded (default
behavior). This is far superior to just having a list that is (for all
practical purposes) hard coded as a "no send".

The current approach causes all sorts of hardship that is unnecessary and it
isn't always that simple to "just change the file type". Please, how second
generation is that solution. We should be able to expect better from
Microsoft.

 

[Jeff Stephenson [MSFT]]

Outlook secruity could address the file attachment problem without using the
knuckle dragging sledge hammer approach Outlook 2003 does by blindly blocking
all attachments of a specific file type. When a message arrives, Outlook
could chack the address book, and one of the properties of some members of
the address book could be a "trusted sender" status. If the sender is
"trusted", then allow the attachment in. If not, then either allow the
attachment to be quarantined in a directory (if selected as a security option
which does not allow execution) or could be blocked and discarded (default
behavior). This is far superior to just having a list that is (for all
practical purposes) hard coded as a "no send".

The current approach causes all sorts of hardship that is unnecessary and it
isn't always that simple to "just change the file type". Please, how second
generation is that solution. We should be able to expect better from
Microsoft.

So when a friend of yours (a "Trusted Sender") gets a virus that sends
itself to you in email, you want to be able to get it too?