--- /dev/null
+Return-Path: <m.walters@qmul.ac.uk>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+ by olra.theworths.org (Postfix) with ESMTP id 2468E431FBC\r
+ for <notmuch@notmuchmail.org>; Mon, 7 Apr 2014 14:06:36 -0700 (PDT)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: -1.098\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=-1.098 tagged_above=-999 required=5\r
+ tests=[DKIM_ADSP_CUSTOM_MED=0.001, FREEMAIL_FROM=0.001,\r
+ NML_ADSP_CUSTOM_MED=1.2, RCVD_IN_DNSWL_MED=-2.3] autolearn=disabled\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+ by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+ with ESMTP id Pa8UFgxu0Qgb for <notmuch@notmuchmail.org>;\r
+ Mon, 7 Apr 2014 14:06:32 -0700 (PDT)\r
+Received: from mail2.qmul.ac.uk (mail2.qmul.ac.uk [138.37.6.6])\r
+ (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))\r
+ (No client certificate requested)\r
+ by olra.theworths.org (Postfix) with ESMTPS id 13DE2431FB6\r
+ for <notmuch@notmuchmail.org>; Mon, 7 Apr 2014 14:06:32 -0700 (PDT)\r
+Received: from smtp.qmul.ac.uk ([138.37.6.40])\r
+ by mail2.qmul.ac.uk with esmtp (Exim 4.71)\r
+ (envelope-from <m.walters@qmul.ac.uk>)\r
+ id 1WXGkA-0000NS-7Q; Mon, 07 Apr 2014 22:06:16 +0100\r
+Received: from [138.37.84.75] (helo=localhost)\r
+ by smtp.qmul.ac.uk with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.71)\r
+ (envelope-from <m.walters@qmul.ac.uk>)\r
+ id 1WXGk9-0003BB-Sh; Mon, 07 Apr 2014 22:06:13 +0100\r
+From: Mark Walters <markwalters1009@gmail.com>\r
+To: Jeremy Nickurak <not-much@trk.nickurak.ca>,\r
+ Jameson Graef Rollins <jrollins@finestructure.net>\r
+Subject: Re: Feature suggestion. Indexing encrypted mail?\r
+In-Reply-To:\r
+ <CA+eQo_3hUAc3uMWw6Hb2JLBATiBDS96GozCa5jqT_1sWz1Y=hQ@mail.gmail.com>\r
+References: <86k3b3ybo6.fsf@someserver.somewhere>\r
+ <878urj1z3j.fsf@maritornes.cs.unb.ca>\r
+ <87txa7pp8z.fsf@servo.finestructure.net>\r
+ <20140406091516.GG26903@vilya.m0g.net>\r
+ <5341D252.90405@fifthhorseman.net>\r
+ <867g71y327.fsf@someserver.somewhere>\r
+ <87ob0dnndk.fsf@servo.finestructure.net>\r
+ <CA+eQo_3hUAc3uMWw6Hb2JLBATiBDS96GozCa5jqT_1sWz1Y=hQ@mail.gmail.com>\r
+User-Agent: Notmuch/0.15.2+615~g78e3a93 (http://notmuchmail.org) Emacs/23.4.1\r
+ (x86_64-pc-linux-gnu)\r
+Date: Mon, 07 Apr 2014 22:06:13 +0100\r
+Message-ID: <87d2gsonne.fsf@qmul.ac.uk>\r
+MIME-Version: 1.0\r
+Content-Type: text/plain; charset=us-ascii\r
+X-Sender-Host-Address: 138.37.84.75\r
+X-QM-Geographic: According to ripencc,\r
+ this message was delivered by a machine in Britain (UK) (GB).\r
+X-QM-SPAM-Info: Sender has good ham record. :)\r
+X-QM-Body-MD5: 4a30019b1195bcf368810456a706d6b8 (of first 20000 bytes)\r
+X-SpamAssassin-Score: 0.0\r
+X-SpamAssassin-SpamBar: /\r
+X-SpamAssassin-Report: The QM spam filters have analysed this message to\r
+ determine if it is\r
+ spam. We require at least 5.0 points to mark a message as spam.\r
+ This message scored 0.0 points. Summary of the scoring: \r
+ * 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail\r
+ provider * (markwalters1009[at]gmail.com)\r
+X-QM-Scan-Virus: ClamAV says the message is clean\r
+Cc: Notmuch Mailing List <notmuch@notmuchmail.org>,\r
+ Daniel Kahn Gillmor <dkg@fifthhorseman.net>,\r
+ Daniel Kahn Gillmor <dkg@debian.org>\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+ <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Mon, 07 Apr 2014 21:06:36 -0000\r
+\r
+\r
+On Mon, 07 Apr 2014, Jeremy Nickurak <not-much@trk.nickurak.ca> wrote:\r
+> Nonetheess, if you can tell from the index that a given message contains\r
+> the words "hotel" "wine" "wife" "secret" and "rendezvous", you can infer a\r
+> *lot* about the contents of encrypted contents of the message.\r
+\r
+I think it is worse that that: I think (from what people said on irc\r
+some time ago) that the index contains the word and the position of that\r
+word so essentially the whole message can be reconstructed from the\r
+index.\r
+\r
+Best wishes\r
+\r
+Mark\r
+\r
+\r
+\r
+>\r
+>\r
+> On Mon, Apr 7, 2014 at 9:57 AM, Jameson Graef Rollins <\r
+> jrollins@finestructure.net> wrote:\r
+>\r
+>> On Mon, Apr 07 2014, john.wyzer@gmx.de wrote:\r
+>> >> confess i haven't been following closely), it wouldn't be much extra\r
+>> >> effort for someone to implement a filter that strips encryption from the\r
+>> >> message. (this might still have the problem mentioned above about also\r
+>> >> stripping PGP/MIME signatures, but the signatures and the decrypted\r
+>> >> message itself would remain intact so they could be shown directly by\r
+>> >> notmuch show without trouble).\r
+>> >\r
+>> > I don't understand that. :-(\r
+>> > This sounds as if the view of the message is not generated from the\r
+>> > mail storage. Isn't the purpose of the index to find the appropriate\r
+>> > message file and everything else is generated from that file?\r
+>>\r
+>> I think that's exactly what Daniel is saying: what's viewed comes from\r
+>> the message directly, and not from the db.\r
+>>\r
+>> jamie.\r
+>>\r
+>> _______________________________________________\r
+>> notmuch mailing list\r
+>> notmuch@notmuchmail.org\r
+>> http://notmuchmail.org/mailman/listinfo/notmuch\r
+>>\r
+>>\r
+> _______________________________________________\r
+> notmuch mailing list\r
+> notmuch@notmuchmail.org\r
+> http://notmuchmail.org/mailman/listinfo/notmuch\r