On Nov 10, 2018, at 11:30 AM, John Hardin <jhar...@impsec.org> wrote: > > The rawbody rules perform much better (unsurprising), and the ASCII-only one > has a better raw S/O:
It looks like HTML_ENTITY_ASCII has been rolled out -- did you decide against the more general unicode due to S/O score? I predict we will need it sooner rather than later. It doesn't seem to have a very high score just yet... I'm still getting FNs with the rule hitting (due to those messages hitting BAYES_00/05). Cheers. --- Amir
