Re: [Bulk] Re: Email encodings (was Re: [gentoo-user] Gentoo speed comparison to other distros )

[Michael Mol <mikemol@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 2257 bytes --]

On 03/18/2013 04:38 PM, Kevin Chadwick wrote:
>>> Wait, K9 Mail doesn't have a plain text option?
>>>
>>> Perhaps I shouldn't be surprised, as I am also unable to comprehend why K9 might enforce top-posting on replies.  
>>
>> K9 Mail can do both plain text and bottom posting.
>> Both set in Account settings/Sending mail.
> 
> It can write but forces html onto users, which potentially includes jpg
> exploits, png exploits, html exploits, script exploits, font exploits...
> 
> And before you say anything. For what benefit, annoying ads from
> paypal. I am quite capable of opening a browser and deciding which
> domains *I* trust??
> 
> Google's network fell into this trap and banned Windows, but did they
> fix the real problem or just raise the bar a little (though I expect
> they took other unreleased measures that would be more interesting)?
> 
> Would be even worse on Iphones where webkit is forced and so as old as
> the rom image. Rom cycle time is a major reason why even on cyanogenmod
> I use firefox over the chrome package which is ancient.
> 
> Of course on Apple laptops even, Safari's webkit is sometimes months old
> anywhow.
> 
> Having knocked Android, I haven't found the time to try the latest
> native email app. I'm not expecting a no html option but I'm pretty
> sure it will have some major pluses over k9mail, which was a trade of
> good for bad on Gingerbread.
> 

I don't know what mail client you use (I suppose I could check your
headers), but *every* mail client I've used disables loading remote
content by default.

Further, you're ranting about users being "forced" to send email with
HTML, intimating that this means they'll send exploit-laden messages to
their recipients. That's patently silly; the people "forced" to send
HTML emails aren't going to be sending exploits. That's like suggesting
that people forced to drive to work are forced to commit vehicular
manslaughter...

It's the recipient of the email who has the burden of remaining secure,
and this is possible largely through simply disabling loading rich media
by default. Again, most mail clients disable loading remote media by
default, and most I've used support disabling packaged media as well.


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 555 bytes --]