Michael Richardson writes:
> And given EFAIL, it seems that we were wise.

nmh wise? I dunno. Part of EFAIL was that the mail client downloaded
bits from the Internet and interleaved them seamlessly into the message.
That seems like an inherently dangerous thing to do... and nmh does it
with one of the messages in this very thread: Ralph Corderoy's message
contains a 'Content-Type: message/external-body; access-type="url";
url="..."' bit that was promptly fetched and displayed in the middle of
the message. How do I disable this behavior, and why does nmh have it
turned ON by default!?

Anthony J. Bentley


Reply via email to