Some sites can be whitelisted for ICAP service.
Also the ICAP service needs to verify the preview and not always the
whole file.
Eliezer
On 04/15/2014 03:05 PM, Nick Hill wrote:
This is down to a cost-benefit analysis.
Does the current icap implementation cost more than the benefits of
the security it brings?
Or
Would a little less security but more convenient functionality be
better or worse?
If better, would the costs of implementing that functionality be
greater or less than benefits derived?
A system which delivered the data to the client slower than the data
received, and performed periodic checks as well as a check when data
download complete may have a better cost-benefit trade-off.
Inconvenient security can become insecure as users will look for ways
to bypass the security.
