Re: Emacs/Mutt and Efail or OpenPGP is safer than S/MIME?

[Richard Stallman <rms@gnu.org>]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > There are other elements like style sheets that are needed for rendering
  > the whole message.  The point is that the rendering engine needs to
  > support such security measures in the first place.

Yes, that is right.

Referring to any external elements from HTML in an email
exposes the user to various forms of mistreatment.
Security in an MUA includes protecting the user from all that.

  > > (And private/secret correspondence shouldn't include such external
  > > references in the first place, IMHO.)

  > Sadly, most people don't care enough.

It's often not "people".  Many companies systematically use this
security hole to track users.  I am very glad that nobody can
tell whether I have read a message -- because I do it in Emacs.


-- 
Dr Richard Stallman
President, Free Software Foundation (https://gnu.org, https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)
Skype: No way! See https://stallman.org/skype.html.