On Mon, Sep 06 2021, Alexander Adolf wrote: > David Bremner <da...@tethera.net> writes: > >> Currently notmuch tries to make a guess for a default email address >> based on the "fully qualified hostname" of the host it is running >> on. This is roughly equivalent to running "hostname -f". I have observed >> two things >> [...] >> If people agree it's generally not useful, I'd propose to replace it >> with some simpler default like "localhost" [1], equally useful to for >> testing, but simpler to implement and test. >> [...] > > I'd support David's suggestion to just default it to "localhost". > > If an unsuspecting user tries to send their first email with notmuch, > the current behaviour could reveal information about the user's local > infrastructure in the message. "localhost" is a much safer default, IMO.
Agreed. I tried to look whether we could get rid of user.name and user.primary_email config values (and then emacs/other email clients would need to resolve that information elsewhere). I don't know if that can ever be done (or should), but the the current beaviour is flaky (and I agree potentially insecure). > > --alex Tomi _______________________________________________ notmuch mailing list -- notmuch@notmuchmail.org To unsubscribe send an email to notmuch-le...@notmuchmail.org
