Tickets :: Comment on [#5892] Linked attachment feature vulnerability

* Your Email Address
* Spam protection	Enter the letters below: .___.__.\ /\ / __. [__ \| \| >< >< (__ [___\|__\|/ \/ \.__)
Comment	> What is needed is not an unique id, it's a secret and unique id.. on > gmail, for example, each rcpt receives an unique and secret id in his > url, including the sender. A timestamp concatenated with a > pseudo-random id, or something like that may be a solution. > > > >> Besides that we already have such an (pseudo) unique id, the > >> timestamp, how would that help? The attacker, which would be the > >> sender, would send the message to himself anyway. > >
Attachment
Watch this ticket