>This is insidious; it means that E-mail messages, purportedly from me (and
>all traces will show they really are from me) can be sent anywhere, without
>my knowledge, with contents that I do not approve. Further, it means that I
>can no longer count on browsing a site without my userid being disclosed.
>Unlike Java, there is no way to disable this. [Also been submitted to
It is possible to disable email from within netscape by not specifying a POP
or SMTP server. However, I agree with you that this is a nasty security hole.
Global Securities Information