From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Richard Stallman Newsgroups: gmane.emacs.bugs Subject: bug#24489: efaq: security risks Date: Wed, 21 Sep 2016 17:26:20 -0400 Message-ID: References: <7ca8f2ur15.fsf@fencepost.gnu.org> Reply-To: rms@gnu.org NNTP-Posting-Host: blaine.gmane.org Content-Type: text/plain; charset=Utf-8 X-Trace: blaine.gmane.org 1474493241 4685 195.159.176.226 (21 Sep 2016 21:27:21 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Wed, 21 Sep 2016 21:27:21 +0000 (UTC) Cc: 24489@debbugs.gnu.org To: Glenn Morris Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Wed Sep 21 23:27:18 2016 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmp2x-0000Gx-0H for geb-bug-gnu-emacs@m.gmane.org; Wed, 21 Sep 2016 23:27:15 +0200 Original-Received: from localhost ([::1]:57647 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bmp2u-0003Ge-Ha for geb-bug-gnu-emacs@m.gmane.org; Wed, 21 Sep 2016 17:27:12 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:34538) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bmp2m-0003Ee-8i for bug-gnu-emacs@gnu.org; Wed, 21 Sep 2016 17:27:05 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bmp2k-0001Tz-9o for bug-gnu-emacs@gnu.org; Wed, 21 Sep 2016 17:27:03 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:53826) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bmp2k-0001Ts-6x for bug-gnu-emacs@gnu.org; Wed, 21 Sep 2016 17:27:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1bmp2j-0007w7-Vg for bug-gnu-emacs@gnu.org; Wed, 21 Sep 2016 17:27:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Richard Stallman Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 21 Sep 2016 21:27:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24489 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: security Original-Received: via spool by 24489-submit@debbugs.gnu.org id=B24489.147449318930464 (code B ref 24489); Wed, 21 Sep 2016 21:27:01 +0000 Original-Received: (at 24489) by debbugs.gnu.org; 21 Sep 2016 21:26:29 +0000 Original-Received: from localhost ([127.0.0.1]:60015 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmp2D-0007vI-CD for submit@debbugs.gnu.org; Wed, 21 Sep 2016 17:26:29 -0400 Original-Received: from eggs.gnu.org ([208.118.235.92]:43320) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmp2B-0007v2-62 for 24489@debbugs.gnu.org; Wed, 21 Sep 2016 17:26:27 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bmp25-0001BO-8y for 24489@debbugs.gnu.org; Wed, 21 Sep 2016 17:26:22 -0400 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:44439) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bmp25-0001BA-6S for 24489@debbugs.gnu.org; Wed, 21 Sep 2016 17:26:21 -0400 Original-Received: from rms by fencepost.gnu.org with local (Exim 4.82) (envelope-from ) id 1bmp24-0002tc-Bz; Wed, 21 Sep 2016 17:26:20 -0400 In-reply-to: <7ca8f2ur15.fsf@fencepost.gnu.org> (message from Glenn Morris on Tue, 20 Sep 2016 18:48:06 -0400) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:123537 Archived-At: [[[ To any NSA and FBI agents reading my email: please consider ]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] > 2) using an Emacs mail client to view HTML mail is a security risk if remote > content is fetched (I think it isn't by default, but this might not > apply to every client) Could you explain why you think it is a security risk? -- Dr Richard Stallman President, Free Software Foundation (gnu.org, fsf.org) Internet Hall-of-Famer (internethalloffame.org) Skype: No way! See stallman.org/skype.html.