On Tue, 11 Oct 2016 15:20:04 -0400, Ken Hornstein said: > >So say I'm a miscreant,and I send you an e-mail phrased such that you'll > >forward it. Meanwhile, I've surreptitiously placed an 'Attach: /etc/passwd' > >in > >the headers of the mail I sent you.... > > I think, given current nmh design, this isn't an issue if you _forward_ > an email (because the headers that you forward are not interpreted by > mhbuild). Nor is it an issue if you use "dist", since mhbuild isn't run > on the message you are redistributing. Although it does occur to me > that if you were to put an "Attach" header in the dist draft file, > something unexpected would happen; we should fix that.
Does the calculus change if 'forw -mime' becomes the default?
pgpyVdFbhUfyU.pgp
Description: PGP signature
_______________________________________________ Nmh-workers mailing list [email protected] https://lists.nongnu.org/mailman/listinfo/nmh-workers
