https://bz.apache.org/SpamAssassin/show_bug.cgi?id=6784

Bill Cole <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]
                   |                            |cconsult.com

--- Comment #2 from Bill Cole <[email protected]> ---
(In reply to Dave Jones from comment #1)
> I am seeing this in some legit emails from salesforce.com.  Is there a
> reason why this would be an indication of spam?

Because it's inherently evil? :)

No MUA should ever actually DO the refresh as requested automatically. That
effectively would an obfuscation of effective message content, since:

1. The original content is obscured by the refresh
2. Entirely new content from the remote URL is injected into the message as
displayed.    

> A better indicator of spam is the URL being listed on a URIBL.

This is only true after a message triggers such a listing, which requires that
an input for some URIBL recognize the domain as a spam indication by means
other than URIBL listings.

Despite the rationale for this being a suspect behavior in email, because of
the apparent FP risk (not all SalesForce mail is non-spam, but surely some must
be legit...) and the fact that it really should never work at all, I think it
has to be put through RuleQA to see if it is worthwhile.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to