1 Return-Path: <dkg@fifthhorseman.net>
\r
2 X-Original-To: notmuch@notmuchmail.org
\r
3 Delivered-To: notmuch@notmuchmail.org
\r
4 Received: from localhost (localhost [127.0.0.1])
\r
5 by olra.theworths.org (Postfix) with ESMTP id C4E29431FC4
\r
6 for <notmuch@notmuchmail.org>; Thu, 29 Jan 2015 10:03:52 -0800 (PST)
\r
7 X-Virus-Scanned: Debian amavisd-new at olra.theworths.org
\r
11 X-Spam-Status: No, score=2.438 tagged_above=-999 required=5
\r
12 tests=[DNS_FROM_AHBL_RHSBL=2.438] autolearn=disabled
\r
13 Received: from olra.theworths.org ([127.0.0.1])
\r
14 by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)
\r
15 with ESMTP id otqU+He0Q409 for <notmuch@notmuchmail.org>;
\r
16 Thu, 29 Jan 2015 10:03:49 -0800 (PST)
\r
17 Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108])
\r
18 by olra.theworths.org (Postfix) with ESMTP id 95576431FBC
\r
19 for <notmuch@notmuchmail.org>; Thu, 29 Jan 2015 10:03:49 -0800 (PST)
\r
20 Received: from fifthhorseman.net (unknown [38.109.115.130])
\r
21 by che.mayfirst.org (Postfix) with ESMTPSA id 7E71AF984
\r
22 for <notmuch@notmuchmail.org>; Thu, 29 Jan 2015 13:03:44 -0500 (EST)
\r
23 Received: by fifthhorseman.net (Postfix, from userid 1000)
\r
24 id 76109201D1; Thu, 29 Jan 2015 13:03:43 -0500 (EST)
\r
25 From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
\r
26 To: notmuch mailing list <notmuch@notmuchmail.org>
\r
27 Subject: Re: privacy problem: text/html parts pull in network resources
\r
28 In-Reply-To: <yq65386uqx0a.fsf@jinwoo-macbookair.roam.corp.google.com>
\r
29 References: <87ppa7q25w.fsf@alice.fifthhorseman.net>
\r
30 <87fvay3g0g.fsf@maritornes.cs.unb.ca>
\r
31 <871tmfin1k.fsf@alice.fifthhorseman.net>
\r
32 <yq65h9vbtsyt.fsf@jinwoo-macbookair.roam.corp.google.com>
\r
33 <yq65386uqx0a.fsf@jinwoo-macbookair.roam.corp.google.com>
\r
34 User-Agent: Notmuch/0.18.2 (http://notmuchmail.org) Emacs/24.4.1
\r
35 (x86_64-pc-linux-gnu)
\r
36 Date: Thu, 29 Jan 2015 13:03:43 -0500
\r
37 Message-ID: <87wq45cvls.fsf@alice.fifthhorseman.net>
\r
39 Content-Type: text/plain
\r
40 X-BeenThere: notmuch@notmuchmail.org
\r
41 X-Mailman-Version: 2.1.13
\r
43 List-Id: "Use and development of the notmuch mail system."
\r
44 <notmuch.notmuchmail.org>
\r
45 List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,
\r
46 <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>
\r
47 List-Archive: <http://notmuchmail.org/pipermail/notmuch>
\r
48 List-Post: <mailto:notmuch@notmuchmail.org>
\r
49 List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>
\r
50 List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,
\r
51 <mailto:notmuch-request@notmuchmail.org?subject=subscribe>
\r
52 X-List-Received-Date: Thu, 29 Jan 2015 18:03:52 -0000
\r
54 On Wed 2015-01-28 18:57:25 -0500, Jinwoo Lee wrote:
\r
55 > Do you mind if I add a boolean defcustom, which determines whether to
\r
56 > block remote images? Its default value will be T (block), but people
\r
57 > who want to see remote images can customize it.
\r
59 I have no objection to this kind of knob in an already fiddly config
\r
60 space. In the other thread, i see the discussion of whether this should
\r
61 expose something fancier than a boolean, but given the number of
\r
62 possible rendering backends, i don't know how well we can support any of
\r
63 these options reliably.
\r
65 What should notmuch do when the customization variable is set to t
\r
66 (block remote images) but the html rendering backend doesn't support
\r
67 blocking remote images?
\r
69 It seems dangerous/disingenuous to offer the option to the user but not
\r
70 be able to enforce it in this case. Should having this set to t
\r
71 restrict the range of html renderers to only those that we can force to
\r