From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id BvQ1FY98NmF4HgEAgWs5BA (envelope-from ) for ; Mon, 06 Sep 2021 22:39:43 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id wFYzEI98NmGvUAAAB5/wlQ (envelope-from ) for ; Mon, 06 Sep 2021 20:39:43 +0000 Received: from mail.notmuchmail.org (nmbug.tethera.net [144.217.243.247]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8A3C71FD44 for ; Mon, 6 Sep 2021 22:39:42 +0200 (CEST) Received: from nmbug.tethera.net (localhost [127.0.0.1]) by mail.notmuchmail.org (Postfix) with ESMTP id B75BB2032B; Mon, 6 Sep 2021 16:39:38 -0400 (EDT) Received: from lahtoruutu.iki.fi (lahtoruutu.iki.fi [IPv6:2a0b:5c81:1c1::37]) by mail.notmuchmail.org (Postfix) with ESMTPS id 5AB6A1FB79 for ; Mon, 6 Sep 2021 16:39:36 -0400 (EDT) Received: from guru.guru-group.fi (unknown [IPv6:2a02:2380:1:9:5054:ff:feb7:a4bc]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: too) by lahtoruutu.iki.fi (Postfix) with ESMTPSA id EB9C81B00120; Mon, 6 Sep 2021 23:39:31 +0300 (EEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iki.fi; s=lahtoruutu; t=1630960772; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=sYux8N6F2aI7WtwhoXhbgizroYDPqXElWTy6fN3gK80=; b=XgE+rUd9NVd7gRfbOFtTPB8v3zGwaVx+cc5DgK8yBcv6nHJMmcwtvH8F4fRrHjaXcf2Xwh Aj9YmwyAvxzCgIiRhVUmmjhU672yQMLFFey0uBSA3gvxfT5a4JiDAwooGZNrelR+DsK4yb 42Jbq/085MP66RN/m3ufLBF2vxStyqoBHGLCXSue6rvaLQlSf7JejICggYtRMxKH8E1nsy 5szkIwZLtc5pLGnV4dvquQP3svFJyNU+nfe7L+lEevjKmwev26jx/53acbRAVZgW3jxunt 4QLh0H2eFCMiQVkZTlYjzs58lvxZzWGQ5K8ZKLztbdrU4cQXbCtd8eQB+eKx/Q== From: Tomi Ollila To: Alexander Adolf , David Bremner , notmuch@notmuchmail.org Subject: Re: Is default email address in notmuch setup / lib useful? In-Reply-To: References: <87sfyibqhj.fsf@tethera.net> User-Agent: Notmuch/0.32+21~gfdddd4c (https://notmuchmail.org) Emacs/27.1 X-Face: HhBM'cA~ MIME-Version: 1.0 ARC-Seal: i=1; s=lahtoruutu; d=iki.fi; t=1630960772; a=rsa-sha256; cv=none; b=FNWocjbZbJ6e1lLZ4MbHr5p4BBLiv+3JaATUu5tth7Ljz2T0PupkGxeXl2FQN1NjocQiT0 DBCQabj7JwRXnFK3FN832zlT442jg8IJl/FBnCZCxhxkqeTeiTG6QLlDnvmPZzJKHKtcxB m2PibLohbS/u2DErZnP5WjeLF4HRKDjdhgSufT5FQMwyDjBlKexSpsmrwVAg5L0CYWC/tk f/C/W/WO+NHKiC/rNv95rzzZA/phv5cmwcnVb7ZOVQoarTzeF5xkTuxZa2ISCIf7psplTQ JAwQoNZUgp5IbLazSeJ/TqAU4YMnGyCU4nZwexlQEvjR/WyUo5t8sY6jrXL1hQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=iki.fi; s=lahtoruutu; t=1630960772; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=sYux8N6F2aI7WtwhoXhbgizroYDPqXElWTy6fN3gK80=; b=Vu7b2YeEYiqF/O6TwbW82E4g4WbkR7sEKihHg3VhteVnHbjLn8Nh3wkyx/r4sF65nBcEBg p7XfTBh6xG7NhhFndYUNDvi0UWqcSDwmLAH0XqgB56Ty6rh4tul17HWs6wM/QWtJ7rt711 osz16fEOUjyMQ/gTvQvwSwzyavkYYnA9azkjoK08ovn7fbo+T0p4WaY/n9oL6DaxktRmbZ E7+QF9CDTlsJ8mhW8rhTrwIFx+lNIqiVIrb3gLqe7S2CJdOmYU3FgRrtzPBKqOyTPKZCdj PuMwhMPO+bbF9Tr7scjJri8uCG487bYKZD+JWnLM7PTO0/MXeq8qXlg+Xr/axw== ARC-Authentication-Results: i=1; ORIGINATING; auth=pass smtp.auth=too smtp.mailfrom=tomi.ollila@iki.fi Message-ID-Hash: OJKZYH4SWMQPNOLJGTCW6X7KWHKQPWCG X-Message-ID-Hash: OJKZYH4SWMQPNOLJGTCW6X7KWHKQPWCG X-MailFrom: tomi.ollila@iki.fi X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-notmuch.notmuchmail.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; suspicious-header X-Mailman-Version: 3.2.1 Precedence: list List-Id: "Use and development of the notmuch mail system." List-Help: List-Post: List-Subscribe: List-Unsubscribe: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1630960782; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=9XQWroJlh9b95VSqEjb173Q3I4WCAhBCohFvbIUp5sc=; b=C/w9bTXZRsZJ4idrXSp6UkjLnmjBJJTVg36gkurhmqsFEbOrwy/37YK4fFqNDMwM/dex8D zFs+geocjpd3zo02nTP9vXR90Z7XFnaDKL0V4jf/TZUHoASr2gRmF1xZdO/i8Ig3S6ZeL1 5Jv46n/91ZCPOGkMzFO3HSXmXGXaGt8Ivn6L72M0ORK116fDAAocqSm0u0TrYjMHvbY3YR UGbO3BHynavPJKD4vvVuAg8ycbFKbeOpTWTsi4j6nUY2iMV1VAWEb/3mzUE8zM6mYUnGmc TxHh38o12Ei3NtZbBSlwdrDEI2l8QNtMRpgyA+Rc3TPNWNBiGrAo1PhBjZAttQ== ARC-Seal: i=2; s=key1; d=yhetil.org; t=1630960782; a=rsa-sha256; cv=fail; b=WdKl0kowT4AsR9r7SrWpQGU9qnNUTfgapOLX+uns0yKk0n0aL1a4bdgT10ITLEcLcjVwJb 9OHCryKJXz/Zdzb67PtFtTdeqh/Xj0JAWyXzQDSwmHE7U+VMnMV/RuhayboqqVI2syffCK jVt6OKcq7/wLNp1cq4fcLBIRkalU3Ip6FBc8ajYzHLV1rZScqJDdQjnYLlgaDN6DfDMGUk fIw+fynP1wKmAIAo+BIx3q4w+Q5S6p0ED/xE/ebz2z4ZW+9rPmd1WJJSyb0ZguSk9jBHmj PAengfT0Dn7ZZvwJDAAyMtjCVHo8xiVNSry8T0ENG0blvvyr342j+mjeVIVtEw== ARC-Authentication-Results: i=2; aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=iki.fi header.s=lahtoruutu header.b=XgE+rUd9; arc=reject ("signature check failed: fail, {[1] = sig:iki.fi:reject}"); dmarc=none; spf=pass (aspmx1.migadu.com: domain of notmuch-bounces@notmuchmail.org designates 144.217.243.247 as permitted sender) smtp.mailfrom=notmuch-bounces@notmuchmail.org X-Migadu-Spam-Score: 1.89 Authentication-Results: aspmx1.migadu.com; dkim=fail ("body hash did not verify") header.d=iki.fi header.s=lahtoruutu header.b=XgE+rUd9; arc=reject ("signature check failed: fail, {[1] = sig:iki.fi:reject}"); dmarc=none; spf=pass (aspmx1.migadu.com: domain of notmuch-bounces@notmuchmail.org designates 144.217.243.247 as permitted sender) smtp.mailfrom=notmuch-bounces@notmuchmail.org X-Migadu-Queue-Id: 8A3C71FD44 X-Spam-Score: 1.89 X-Migadu-Scanner: scn1.migadu.com X-TUID: sqzDpkXXHPad On Mon, Sep 06 2021, Alexander Adolf wrote: > David Bremner writes: > >> Currently notmuch tries to make a guess for a default email address >> based on the "fully qualified hostname" of the host it is running >> on. This is roughly equivalent to running "hostname -f". I have observed >> two things >> [...] >> If people agree it's generally not useful, I'd propose to replace it >> with some simpler default like "localhost" [1], equally useful to for >> testing, but simpler to implement and test. >> [...] > > I'd support David's suggestion to just default it to "localhost". > > If an unsuspecting user tries to send their first email with notmuch, > the current behaviour could reveal information about the user's local > infrastructure in the message. "localhost" is a much safer default, IMO. Agreed. I tried to look whether we could get rid of user.name and user.primary_email config values (and then emacs/other email clients would need to resolve that information elsewhere). I don't know if that can ever be done (or should), but the the current beaviour is flaky (and I agree potentially insecure). > > --alex Tomi