Re: [MlMt] Domain whitelist for remote content, revisited

2017-02-24 Thread Benny Kjær Nielsen

On 24 Feb 2017, at 9:01, Sam Hathaway wrote:


On 23 Feb 2017, at 11:50 PM PST, Jan Erik Moström wrote:


On 24 Feb 2017, at 8:50, Sam Hathaway wrote:

Yes, I was clicking "forever" as well, but didn't have the patience 
to get past that initial period where there were many new domains to 
classify.


OK (when I was using Mail this was how I handled this)


I guess I was spoiled by Thunderbird! :)


In any case, I agree that it would be very useful to more easily be able 
to review what has been blocked (and then it would be natural to also 
allow unblocking specific domains). I'll certainly keep it in mind.


--
Benny
___
mailmate mailing list
mailmate@lists.freron.com
https://lists.freron.com/listinfo/mailmate


Re: [MlMt] Domain whitelist for remote content, revisited

2017-02-24 Thread Sam Hathaway

On 23 Feb 2017, at 11:50 PM PST, Jan Erik Moström wrote:


On 24 Feb 2017, at 8:50, Sam Hathaway wrote:

Yes, I was clicking "forever" as well, but didn't have the patience 
to get past that initial period where there were many new domains to 
classify.


OK (when I was using Mail this was how I handled this)


I guess I was spoiled by Thunderbird! :)
-sam
___
mailmate mailing list
mailmate@lists.freron.com
https://lists.freron.com/listinfo/mailmate


Re: [MlMt] Domain whitelist for remote content, revisited

2017-02-23 Thread Sam Hathaway

On 23 Feb 2017, at 11:48 PM PST, Jan Erik Moström wrote:


On 23 Feb 2017, at 19:11, Sam Hathaway wrote:


- I'd like to see some of these images.
- Hm, do I click "Load Once"? I have no idea how many questions 
Little Snitch will make me answer.

- OK, let's do it!
- [Answer like a dozen allow/deny questions]
- Damn, I guessed wrong and denied a domain that had an image I 
needed.

- [Go to Little Snitch preferences and change settings]


Hmmm, here I would (and do) click "forever" and select allow/deny for 
the various domains. In the beginning Little Snitch will ask a lot but 
after a while most of the links already have a rule. Alternatively you 
open LS and define a rule that blocks most stuff and the add some 
exceptions to that rule (I think that works).


Yes, I was clicking "forever" as well, but didn't have the patience to 
get past that initial period where there were many new domains to 
classify.

-sam
___
mailmate mailing list
mailmate@lists.freron.com
https://lists.freron.com/listinfo/mailmate


Re: [MlMt] Domain whitelist for remote content, revisited

2017-02-23 Thread Jan Erik Moström

On 23 Feb 2017, at 19:11, Sam Hathaway wrote:


- I'd like to see some of these images.
- Hm, do I click "Load Once"? I have no idea how many questions Little 
Snitch will make me answer.

- OK, let's do it!
- [Answer like a dozen allow/deny questions]
- Damn, I guessed wrong and denied a domain that had an image I 
needed.

- [Go to Little Snitch preferences and change settings]


Hmmm, here I would (and do) click "forever" and select allow/deny for 
the various domains. In the beginning Little Snitch will ask a lot but 
after a while most of the links already have a rule. Alternatively you 
open LS and define a rule that blocks most stuff and the add some 
exceptions to that rule (I think that works).


= jem
___
mailmate mailing list
mailmate@lists.freron.com
https://lists.freron.com/listinfo/mailmate


Re: [MlMt] Domain whitelist for remote content, revisited

2017-02-23 Thread Sam Hathaway

On 23 Feb 2017, at 6:31 AM PST, Benny Kjær Nielsen wrote:

But it's still the same number of domains. If I understand correctly, 
you're just not forced to make a decision about every one of them.


Yes, that's right. With Little Snitch, the workflow is:

- I'd like to see some of these images.
- Hm, do I click "Load Once"? I have no idea how many questions Little 
Snitch will make me answer.

- OK, let's do it!
- [Answer like a dozen allow/deny questions]
- Damn, I guessed wrong and denied a domain that had an image I needed.
- [Go to Little Snitch preferences and change settings]

With Thunderbird, it went like this:

- I'd like to see some of these images.
- Let's look at the list of domains…
- Oh, these couple domains look like they probably have the images I 
like. [click, click]

- No? Let's try this other one. [click]
- OK! Good enough.

I've always wanted the image-blocking feature to also allow the user 
to see exactly what was blocked. If some kind of popup menu is 
implemented then it wouldn't be far from an implementation similar to 
Thunderbird.


That would be fantastic.


No promises though.


Of course. Thanks for considering it!
-sam
___
mailmate mailing list
mailmate@lists.freron.com
https://lists.freron.com/listinfo/mailmate


Re: [MlMt] Domain whitelist for remote content, revisited

2017-02-23 Thread Benny Kjær Nielsen

On 22 Feb 2017, at 23:05, Sam Hathaway wrote:

A while ago I posted asking if there was a way to tell MailMate to 
load remote content only from specific domains. The rationale here is 
that, since sender addresses can be easily spoofed, allowing remote 
content loading based on sender address is not really effective at 
preventing tracking.


Nevertheless, this is what most users request. I'm considering to build 
in a white-listing feature based on the email address, but I'll then 
combine it with a requirement for some other headers to also match, 
e.g., the `X-Mailer` header. This part could be optional.


(The latest test release includes blacklisting addresses for the 
completion of email addresses in the composer. This is kind of similar 
which is why I've been considering how to improve image blocking again.)


By allowing loads by source domain, we can effectively control where 
potential tracking data ends up. (This is one of the few features I 
miss from Thunderbird.)


Folks suggested that I try using Little Snitch to do this, and so I 
did. Turns out, Little Snitch is too intrusive when used this way, as 
it asks about each domain in turn, and I have to allow or deny each 
one. (And there are *lots* of domains referenced in your average HTML 
email!)


Thunderbird, in the other hand, uses a popup menu which lists each 
domain and allows the user to select which they would like to allow 
content from.


But it's still the same number of domains. If I understand correctly, 
you're just not forced to make a decision about every one of them.


I've always wanted the image-blocking feature to also allow the user to 
see exactly what was blocked. If some kind of popup menu is implemented 
then it wouldn't be far from an implementation similar to Thunderbird.


No promises though.

--
Benny
___
mailmate mailing list
mailmate@lists.freron.com
https://lists.freron.com/listinfo/mailmate