Posted on 12/27/2006 9:54:13 AM PST by Salo
DOD bars use of HTML e-mail, Outlook Web Access
BY Bob Brewin Published on Dec. 22, 2006
Due to an increased network threat condition, the Defense Department is blocking all HTML-based e-mail messages and has banned the use of Outlook Web Access e-mail applications, according to a spokesman for the Joint Task Force for Global Network Operations.
An internal message available on the Internet from the Defense Security Service (DSS) states that JTF-GNO raised the network threat condition from Information Condition 5, which indicates normal operating conditions, to Infocon 4 “in the face of continuing and sophisticated threats” against Defense Department networks.
Infocon 4 usually indicates heightened vigilance in preparation for operations or exercises or increased monitoring of networks due to increased risk of attack.
The JTF-GNO mandated use of plain text e-mail because HTML messages pose a threat to DOD because HTML text can be infected with spyware and, in some cases, executable code that could enable intruders to gain access to DOD networks, the JTF-GNO spokesman said.
In an e-mail to Federal Computer Week, a Navy user said that any HTML messages sent to his account are automatically converted to plain text.
The JTF-GNO spokesman declined to say why the command raised the threat level except to say that Infocon levels are adjusted to reflect worldwide social and political events and activities. He said the current threat level does not bar the use of attachments, including Power Point slides used for briefings.
He also declined to tell FCW what other restrictions on e-mail that JTF-GNO has imposed. But a December 2006 newsletter of the Colorado National Guard said that under Infocon 4, Guard members receiving e-mails from any unknown source, including “mail received from unrecognized Department of Defense accounts,” should be viewed as potentially harmful.
The Colorado Guard newsletter also alerted personnel to be vigilant against e-mail “phishing” attempts to gain personal information.
The ban on use of Outlook Web mail will hit thousands of users at Robins Air Force Base, Ga., according to an internal message available on the Internet. The ban on the use of Outlook Web Access “will significantly impact the way we presently conduct business,” due to the fact that that Web mail is the primary means of e-mail access for 4,500 employees at the base, according to the message.
Robins has developed a work-around for these users to access Outlook directly by logging on to government computers with their common access cards, the internal message said.
JTF-GNO raised the DOD network threat level to Infocon 4 in mid-November after an attack on the networks at the Naval War College (NWC) required NWC to take its systems offline. The JTF-GNO spokesman said at the time that the increase in threat conditions had no relation to the attack against NWC.
I first assumed it referred to browser based email -- things like hotmail, gmail, yahoo mail, and, of course, the Outlook web client.
But there's some discussion of HTML embedded in the messages -- in other words, everything other than text.
HTML mail adds MIME headers to the standard RFC822 mail. Adding the Content-type: text/html tells the e-mail client that the section past the headers is HTML and can be ingested and rendered. "text/plain" signal ordinary textual mail. A type of "multipart/mixed" signals multiple sections that can be of different MIME types.
My mom uses Hotmail (please spare the laughter), am I going to be wiping her computer clean in the near future?
Nah...
Just make sure her virus definitions are up to date and are updated daily. Be sure to schedule at least a weekly scan of the hard drive and tell her not to open spam or unknown attachments.
That's all you can do.
Isn't Windows grand?
Coincidentally this has been observed-
"Quake cuts off much of Asia Internet"
http://www.freerepublic.com/focus/f-news/1758946/posts
Those pesky Asians have been known to get themselves walled off every now and again for toying with the "features" that Iggle defends.
HTML= Hyper Text Markup Language.
Whenever you see a post on FR that is other than plain text, they are using HTML commands, like bolding their text, Highliting, underlining....etc.
That was the quake off of Taiwan?
interesting...
11:25 AM
Pacific?
Taiwan??
Oh, wait!
Check this out-
"Enhancing its ability to serve customers on a global basis, Verizon Business made a number of strategic investments in undersea network cables. The company joined a consortium of international carriers to build the first next-generation, multi-terabit, optical undersea cable system linking the U.S. and the mainland of China. Verizon Business is the only U.S.-based carrier in the consortium, which includes China Telecom, China Netcom, China Unicom, Korea Telecom and Taiwan's Chunghwa Telecom."
http://biz.yahoo.com/prnews/061227/nyw027.html?.v=81
Could be that converged networks supporting grid computing may be a little much for a Windoze mentality.
The question is why?
Bump
It sucks. you can no longer bold, or change your text color to indicate emphasis.
PST
LOL!
Wild guess, but the ChiComs have been punking out some DOD systems lately (Navy War College and some others, IIRC). It may be someone has figured out the next vector.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.