By Laura Koetzle, Analyst

Spam isn't just an annoyance--it has altered people's behavior.

Today, North American online consumers are 47 percent less likely than they were in 2000 to look through e-mail promotions for interesting items. The spam problem won't go away, because the costs of sending it are extremely small. In fact, the bulk of the cost of junk e-mail is borne by the recipient--in increased bandwidth and server requirements--rather than by the sender.

In response to users' desire to be insulated from oceans of junk e-mail, Microsoft's new Outlook 11 will ship with defaults designed to spare them from involuntary exposure to offensive and extraneous images that often accompany spam. This shift in policy for Outlook isn't just a crowd pleaser--it reflects a broader shift in Microsoft's strategy.

Security can't be considered in isolation--it always must be traded off against either cost or ease of use. Microsoft historically has shipped its products with the security settings dialed down to win over end users. Users and system administrators have long had the option of locking down Microsoft's operating systems and applications with more restrictive settings but have rarely chosen to do so, because they enjoyed convenient features like the automatic download of images referred to in HTML e-mail.

Today, however, Microsoft needs to drive growth in the high-end enterprise market, which means winning over information security staffers who feel burned by Microsoft's longtime policy of user-friendly, relatively insecure default settings. That's what

		Related story New Outlook to boot spammers Microsoft takes spam fighting more seriously in the next version of its e-mail software.

Microsoft designed its Trustworthy Computing initiative to do, and that effort will be critical to Microsoft's success, because 85 percent of billion-dollar North American companies have groups dedicated to information security.

The more restrictive default settings that will ship with products like Outlook will be the most visible pieces of the Trustworthy Computing initiative for end users. However, information security officers will pay far more attention to the effects of the secure coding training that Microsoft's developers received as part of the initiative. Security czars will expect that training to result in fewer security holes in Microsoft's forthcoming .Net Server operating systems.

Although more security-oriented default settings from Microsoft will help improve overall security, they don't absolve users and system administrators of the ultimate responsibility for securing their computing environments.

© 2002, Forrester Research, Inc. All rights reserved. Information is based on best available resources. Opinions reflect judgment at the time and are subject to change.

Download free PDF versions of News.com's award-winning Special Reports. The latest research in a handy format. Registration required.

Breaking the digital gridlock
July 26, 2004

South Korea's digital dynasty
June 23, 2004

Bigger blue
June 14, 2004

Reality behind the politics
May 4, 2004

Playing for keeps
December 9, 2003

Corporate classrooms
November 11, 2003

Vision Series 4 (Part 1)
June 2, 2003

Digital remix
May 28, 2003

Mother of invention
April 11, 2003

It's a buyer's market
February 11, 2003

Nothing but air
February 3, 2003

Vision Series 3
December 2, 2002

A Mortal Microsoft
October 14, 2002

E-Terrorism
August 26, 2002

China's new dynasty
July 9, 2002

Vision Series: Tech chiefs dictate the future
June 10, 2002

Vision Series: Survey results
June 10, 2002

Sun's Java jigsaw
March 28, 2002

The Gatekeeper: Windows XP
October 17, 2001

A bitter pill
September 26, 2001

Privacy vs. safety
September 17, 2001