E-mail Wire-Tapping Prevention

Outlook 5
Outlook 2000
Netscape Messenger 6

Note on both Procedures for Outlook

By following this procedure, you will accomplish two things. First, you will configure the mailer program so that all of its network activity happens in the "Restricted" security zone. Second, you will increase the security of the Restricted zone beyond its default setting so that "Active scripting" is disabled. The end result is that your email program will have Active scripting (which includes JavaScript) disabled whenever it shows you an email, thereby preventing the email wiretap exploit.

Instructions for turning off JavaScript in Outlook 5

1. Select the "Options..." command under the Outlook Express "Tools" menu.
2. Select the "Security" tab in the "Options" dialog box.
3. In the "Security Zones" section, select "Restricted sites zone (More secure)"
4. Push the "OK" button in the "Options" dialog box.
5. On the Windows Start Menu, select the "Settings | Control Panel..." command.
6. Double-click on the "Internet Options" icon in "Control Panel" Window.
7. Click on the "Security" tab in the "Internet Properties" dialog box.
8. In the "Security" dialog box, select the "Restricted sites".
9. Make sure that the security level slider control for the zone is set to "High".
10. Click on the "Custom Level..." button.
11. Scroll down to the "Active scripting" entry in the settings list in the "Security Settings" dialog box.
12. Select "Disable" for "Active scripting" entry.
13. Push the "OK" button in the "Security Settings" dialog box.
14. Push the "OK" button in the "Internet Properties" dialog box.
15. Close the "Control Panel" window.

TOP OF PAGE

Instructions for turning off JavaScript in Outlook 2000

1. Select the "Options..." command under the Outlook "Tools" menu.
2. Select the "Security" tab in the "Options" dialog box.
3. Under "Secure Content" section, select "Restricted sites" in the Zone Window.
4. Click on the "Zone settings..." button.
5. Click "OK" for the warning dialog box which pops up on the screen.
6. In the "Security" dialog box, make sure that the "Restricted sites" icon is selected.
7. Make sure that the security level slider control for the zone is set to "High".
8. Click on the "Custom Level..." button.
9. Scroll down to the "Active scripting" entry in the settings list in the "Security Settings" dialog box.
10. Select "Disable" for "Active scripting" entry.
11. Push the "OK" button in the "Security Settings" dialog box.
12. Push the "OK" button in the "Security" dialog box.
13. Push the "OK" button in the "Options" dialog box.
14. All done (finally!).

TOP OF PAGE

Instructions forTurning Off JavaScript in Netscape Messenger 6

1. Select the "Preferences..." command under the Netscape "Edit" menu.
2. Click on the "Advanced" option in the "Category" list of the "Preferences" dialog box.
3. Make sure that "Enable Javascript for Mail and News" option is not selected. There should be no "X" next to this option.
4. Click on the "OK" button of the "Preferences" dialog box.
5. All done (Much, much simpler than Outlook!)

TOP OF PAGE

Arthur Hissey
Computer Research & Technology
www.crt.net.au