Security of webmail interface vs. POP?

I've been using webmail for years but I miss the convenience and functionality of a POP client. Heck, webmail even makes me miss PINE, sometimes.

I would really like to start picking up my mail with POP again, and my provider supports it. However, I have a couple reservations about the inherent security issues.

I understand using a web browser to read my mail is inherently insecure as the browser is a powerful general purpose application with the power to install ActiveX controls, among other things. I also realize that using webmail means I need a given email to be re-sent to my browser each time I want to read (barring a cached copy). I don't even know all the things I don't know on this topic.

But I still wonder if webmail might have some advantages over using a POP client. For instance, assuming I already have malware on my computer, a POP client would seem to give that malware much more intimate access to my outgoing emails, as each email would be stored as a file on my computer which would be potentially vulnerable to infection. This seems to provide more opportunities for malware mischief than simply sending text via a web form.

My non-expert gut-based conclusion is that web mail may be safer if you're afraid your machine is infected, but that POP is preferable otherwise.

Any comments on this, or comments on the more specific question of which format presents a greater risk of initially infecting my computer, would be much appreciated. As always, thanks in advance.

 

The main malware you need to be concerned with when using POP mail is viruses. So, keeping an anti-virus program installed and updated is important when using a POP mail client (Outlook, Outlook Express, Thunderbird, etc.).

Do you have an anti-virus program installed? If not, you should do so before implementing POP mail.

 

Yep, I use AVG free along with some free spyware programs (ad-aware, spybot, javacool spyware blaster) and a firewall. I think I have it set up pretty tight. I keep the hosts file locked using Zonealarm so I have to manually change a setting just to update the spyware programs. And, I have Cacheman set to display CPU and memory usage on the taskbar, providing me with some minor chance to catch unexpected activity.

So, do you agree with my guess that webmail's better if you're infected, but POP is better if you can stay clean? Just wondering.

I was going to use Thunderbird, as I understand Outlook to be a nasty security risk.

 

Sounds like you're in well prepared to use POP mail. As far as whether webmail or POP is better is partly a matter of preference. Some people prefer being able to access their email anywhere they have Internet access. I've always used POP mail and I prefer it.

Regarding choice of email client, I believe Outlook Express (OE) may have more security issues than other clients, including Outlook (part of MS Office). But, I've used OE for years and have no concerns about using it. My mix of security tools is similar to yours. I also use a router which provides additional firewall protection.

I haven't tried Thunderbird but I've seen many favorable comments about it. Windows Live Mail is another option; I have the impression it has better security than OE.

One final comment on security: Your ISP is a factor here. I used Earthlink for several years before having to change to another ISP due to a change in the local telecommunications provider. I don't recall ever receiving a virus-infected message while using Earthlink. Clearly, they must have been scanning email flowing through their mail servers and catching any viruses before the messages got to my computer. And, I found their spam control feature very effective.