-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 19.04.13 04:09, Daniel Kahn Gillmor wrote: > hi enigmail folks-- > > package/mimeEncrypt.js contains two hardcoded references to "enig2" > that are used to create the MIME boundaries when using PGP/MIME. > > In many circumstances it is not a problem to leak the information > that the mail sender is using enigmail specifically, but there are > some users and some use cases where the user does not want to > reveal their choice of software. > > See, for example, Tor's documentation about thunderbird and > enigmail: > > https://trac.torproject.org/projects/tor/raw-attachment/wiki/doc/TorifyHOWTO/EMail/Thunderbird/Thunderbird%2BTor.pdf > > Is there a reason to use the "enig2" prefix in > package/mimeEncrypt.js at all? Would it be possible to simply > remove it (and maybe extend the size of the string returned by > createBoundary() ? The attached patch implements the suggestion. > > Alternately, if a fixed prefix is necessary for the boundary (i > don't know why that would be), maybe we could move that fixed > prefix into an enigmail preference, so that users could override it > if they needed?
I can certainly do that. However, what would it change? I could still identify a message created by Enigmail, and I could still tell you if some other product would have faked a message to look like Enigmail. Things like line wrapping of the Content-Type header, the text above the first MIME part, the headers of the signature part etc. make a message created by Enigmail identifiable. - -Patrick -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.18 (Darwin) iQEVAwUBUXDlSck25cDiHiw+AQi8fggAisYior01XvqsNx47n1gX4qztanKIw68f nN/5oMNTwbJcWX09KNKD8nM5HVdmww3MC1hZEjruKhQTnn8Pg5xQOPOLOeKfJKF7 acSLW+iZou6uLmvIMIeMuYnvEcDwpzwo7AJp94iShmNuNFuUl6rdAyvOTI6a9sjR yhR4FZ1n9GQyzJcVwlzFzm3qebq1ZAhqMJd35cf56Pd/BRLVZQKYwtCNPr/Zzyka oHupNXsbLKPdIV0NR5XL4Il+spgQy/L47fKDHVOiVWmK1gYr4liU3zLfhnpEQk7M D8AN+tX1TkICw1LIwttu9GkCVo9qZGtAYNuC0I6IBDYkMA6WdDEK3w== =P/4m -----END PGP SIGNATURE----- _______________________________________________ enigmail-users mailing list [email protected] https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
