View HTML mail from trusted senders, plain text from others

My previous post described how to create a quick-and-simple HTML e-mail newsletter. I mentioned that you should view the plain-text version of the newsletter so you could see how it looks to recipients who have HTML mail disabled.

But what if you're on the receiving end? How can you ensure that you see the full-color, fancy-format HTML messages sent to you by people or organizations you trust, but are protected from potentially malicious HTML mail from bad guys? In Microsoft Outlook 2003 and 2007, it's easy.

Customize Outlook's message view
Start by setting Outlook to view messages as plain text by default. In Outlook 2007, click Tools > Trust Center > E-mail Security. In Outlook 2003, click Tools > Options > Preferences > E-mail Options. In both versions, check "Read all standard mail as plain text" and click OK.

Check "Read all standard mail in plain text" in Outlook 2007's E-mail Security dialog box.

(Credit: Microsoft)

Next, allow HTML mail from sources you trust to appear by default. In both Outlook 2007 and 2003, click Tools > Options > Junk E-mail (under the Preferences tab). Choose the Safe Senders tab and make sure "Also trust e-mail from my contacts" is checked. You can also check "Automatically add people I e-mail to the Safe Senders List." Other options in this dialog let you add addresses manually and import or export your safe addresses as a .txt file. When you're done, click OK twice.

Make sure Outlook adds addresses in your contacts to its Safe Senders list.

(Credit: Microsoft)

You can also add e-mail addresses to your safe list by right-clicking the address and selecting Junk E-mail > Add Sender to Safe Senders List.

I wasn't able to find a way to set Mozilla Thunderbird to view HTML mail from sources you trust and plain-text messages from everyone else. You can make the view change globally in Thunderbird by clicking View > Message Body As > Plain Text.

The other two options on this submenu let you view messages as either "Original HTML" or "Simple HTML." What's the difference? According to MozillaZine, simple HTML blocks Javascript and remote-image display and interprets only "basic" HTML commands.

[Shepy_UK]

Yes, such a flawless idea.

Luckily there is no chance of any of your trusted senders ever getting a virus, and spoofed from address emails never happen, otherwise this would be a terrible idea.

I'm so happy we have a problem free internet and ideas like this work so well.

~Shepy

[doreilly]

Do I detect a note of sarcasm in your comment? Of course, no security measure is foolproof, but this makes you a little bit safer than you would be otherwise.

Dennis