From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.devel Subject: Re: Emacs/Mutt and Efail or OpenPGP is safer than S/MIME? Date: Sun, 20 May 2018 19:34:33 +0200 Message-ID: References: <878t8lfgu3.fsf@mat.ucm.es> <83o9hfk311.fsf@gnu.org> <87lgcjo736.fsf@igel.home> <831sebjyb2.fsf@gnu.org> <87bmdfo2b5.fsf@igel.home> <87vabl5ech.fsf@mat.ucm.es> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1526837620 8225 195.159.176.226 (20 May 2018 17:33:40 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sun, 20 May 2018 17:33:40 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (gnu/linux) Cc: Uwe Brauer , emacs-devel@gnu.org To: Richard Stallman Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Sun May 20 19:33:36 2018 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1fKSD9-000214-Jr for ged-emacs-devel@m.gmane.org; Sun, 20 May 2018 19:33:35 +0200 Original-Received: from localhost ([::1]:47223 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fKSFG-0007Ea-Pw for ged-emacs-devel@m.gmane.org; Sun, 20 May 2018 13:35:46 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:35440) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1fKSEL-0006yF-2Y for emacs-devel@gnu.org; Sun, 20 May 2018 13:34:50 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1fKSEH-0005NT-4o for emacs-devel@gnu.org; Sun, 20 May 2018 13:34:49 -0400 Original-Received: from hermes.netfonds.no ([80.91.224.195]:49620) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1fKSEG-0005Cv-UQ; Sun, 20 May 2018 13:34:45 -0400 Original-Received: from cm-84.212.221.165.getinternet.no ([84.212.221.165] helo=stories) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1fKSE5-0007Sq-Ph; Sun, 20 May 2018 19:34:36 +0200 Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAD1BMVEUNCAhdREUoGhzn2Nqc eXnKoFK/AAACYElEQVQ4jU2Ti3HsIAxFheICAFMAyBQQryggGPVf07uyncxjdmY9HPS/ok35S3Wq 6rDU8tL7LCUu4QDAhU3hvN/3A6BZOJZOA8jEZ/8DZuFr6QdgRuLxAnVAm+lZdMzKQZtquRklqyGv 0RCiUtc2ymshjUhKCUgqCtJo6wV+WITXsA8tfdLy4H6kCe8AvKLc0Yc9IEsD2CPHVv9AfE3KNKrB YoebG6TqMZoY6qvF4raKd+Ek3FOpsLARUdQPHx8HF7GD1KSbRja7pMOPDiG5gwdYnAhhk7vC1+nX FTCEtGdy0MTB7PQcZgcJQOrCDGR/AVwupFHMAM41sv4B2gFgIoRSrbwFetIH4KEo69B+Hko/Xl8G PhyO9Q1QEIWmO0Jt7GAb6mAmgOR1KIDdPXgAxALvzO2sFPwFhf1bdj3n7lnlnioTRoLvvr4bQHLQ 6vFBfVdlDHK3Dy5HQrqU4l6FrxxZqO7mbrQgXY5xYuSzRUEh0MSETFJX6hfhLZdWxcMHTS9ISQRd txyFvQvBwWwAmYt0KQBPdzoGeCYAYSuGv3vI3jaobuSdrh4wYkkQ5D021Av9yEHTXJ2SCtG6PDxD wSrF1wAWYWZ/fQNxpSYMzQGn/M7LZbPpBYux6bo43yC7+irX9enuapSflu7AggHmyrIByAwzRHly bZYb9kdqeuQjePSo6GoFs6Hq68T+ewBD1uusv2ncALFTXz2vNZ4E/gNQ7G66O6CeXVdOHUy5F7M2 szVeIABXkzV8w8O95xdGwOQtz6lkX+bKN7AIwJAiV5mQ9voFxZXPKLDVcFHL/IJ/LVeD6wuFrQMA AAAASUVORK5CYII= In-Reply-To: (Richard Stallman's message of "Sat, 19 May 2018 23:15:40 -0400") X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 80.91.224.195 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: "Emacs-devel" Xref: news.gmane.org gmane.emacs.devel:225484 Archived-At: Richard Stallman writes: > Does that create a vulnerability in some cases? Can newsgroup > postings use an image to determine who reads them? Yes and no. If you consider emails, the possibility of tracking there is pernicious because the person who sent the email knows that they sent that email to you, and when they get a pingback when you read that email, they'll know with pretty high probability that you've read that email. Which is why loading external resources when reading email is bad (even if many email readers default to this behaviour). When you're reading a newsgroup, you're reading a public resource. Anybody can read it, so the only thing the person who controls the external resources can determine is that somebody (at a certain IP address) read the message. It's the same situation as if you read a web page -- somebody'll know you did it, but not who you are (beyond the IP address). -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no