From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.devel Subject: Re: Emacs/Mutt and Efail or OpenPGP is safer than S/MIME? Date: Thu, 17 May 2018 22:30:04 -0400 Message-ID: References: <878t8lfgu3.fsf@mat.ucm.es> <83o9hfk311.fsf@gnu.org> <87lgcjo736.fsf@igel.home> <831sebjyb2.fsf@gnu.org> <87bmdfo2b5.fsf@igel.home> Reply-To: rms@gnu.org NNTP-Posting-Host: blaine.gmane.org Content-Type: text/plain; charset=Utf-8 X-Trace: blaine.gmane.org 1526610536 8800 195.159.176.226 (18 May 2018 02:28:56 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Fri, 18 May 2018 02:28:56 +0000 (UTC) Cc: oub@mat.ucm.es, eliz@gnu.org, emacs-devel@gnu.org To: Andreas Schwab Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Fri May 18 04:28:51 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fJV8T-00028Q-J1 for ged-emacs-devel@m.gmane.org; Fri, 18 May 2018 04:28:49 +0200 Original-Received: from localhost ([::1]:36340 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fJVAY-0006am-Lo for ged-emacs-devel@m.gmane.org; Thu, 17 May 2018 22:30:58 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:33609) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fJV9o-0006YP-Bz for emacs-devel@gnu.org; Thu, 17 May 2018 22:30:13 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fJV9n-0008Te-IM for emacs-devel@gnu.org; Thu, 17 May 2018 22:30:12 -0400 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:59953) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fJV9g-0008Qd-QK; Thu, 17 May 2018 22:30:04 -0400 Original-Received: from rms by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1fJV9g-0007tZ-93; Thu, 17 May 2018 22:30:04 -0400 In-reply-to: <87bmdfo2b5.fsf@igel.home> (message from Andreas Schwab on Wed, 16 May 2018 20:58:22 +0200) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 2001:4830:134:3::e X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:225380 Archived-At: [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > There are other elements like style sheets that are needed for rendering > the whole message. The point is that the rendering engine needs to > support such security measures in the first place. Yes, that is right. Referring to any external elements from HTML in an email exposes the user to various forms of mistreatment. Security in an MUA includes protecting the user from all that. > > (And private/secret correspondence shouldn't include such external > > references in the first place, IMHO.) > Sadly, most people don't care enough. It's often not "people". Many companies systematically use this security hole to track users. I am very glad that nobody can tell whether I have read a message -- because I do it in Emacs. -- Dr Richard Stallman President, Free Software Foundation (https://gnu.org, https://fsf.org) Internet Hall-of-Famer (https://internethalloffame.org) Skype: No way! See https://stallman.org/skype.html.