4 edited tags; edited title
| link

What security precautions should we take when letting ana C# application send/receive emails?

3 Grammar correction
| link

What security precautions should we take when letting an application send/receive emails?

2 removed request for external ressources + bullet points for the more concrete questions
source | link

I'm writing a web application which will be able to send signed and encrypted emails to someone else outside my trust boundary. It will also retrieve SMIMES/MIME encrypted (and maybe also signed) emails from different accounts.

What security precautions do I need to make? Is there a list of useful resources somewhere? The Google results were not that helpful until now.

One moreMore specific questionquestions: Is there a need to implement any kind of input validation (for the emails received). The attachment will be stored in a database and accessible via the web UI. What about output sanitization? As the email will be encrypted and signed, is there a strong need to do anything with the contents before?

  • Is there a need to implement any kind of input validation (for the emails received). The attachment will be stored in a database and accessible via the web UI.
  • What about output sanitization? As the email will be encrypted and signed, is there a strong need to do anything with the contents before?

I'm writing a web application which will be able to send signed and encrypted emails to someone else outside my trust boundary. It will also retrieve SMIME encrypted (and maybe also signed) emails from different accounts.

What security precautions do I need to make? Is there a list of useful resources somewhere? The Google results were not that helpful until now.

One more specific question: Is there a need to implement any kind of input validation (for the emails received). The attachment will be stored in a database and accessible via the web UI. What about output sanitization? As the email will be encrypted and signed, is there a strong need to do anything with the contents before?

I'm writing a web application which will be able to send signed and encrypted emails to someone else outside my trust boundary. It will also retrieve S/MIME encrypted (and maybe also signed) emails from different accounts.

What security precautions do I need to make?

More specific questions:

  • Is there a need to implement any kind of input validation (for the emails received). The attachment will be stored in a database and accessible via the web UI.
  • What about output sanitization? As the email will be encrypted and signed, is there a strong need to do anything with the contents before?
1
source | link