--- /dev/null
+Return-Path: <jrollins@finestructure.net>\r
+X-Original-To: notmuch@notmuchmail.org\r
+Delivered-To: notmuch@notmuchmail.org\r
+Received: from localhost (localhost [127.0.0.1])\r
+ by olra.theworths.org (Postfix) with ESMTP id 240F0431FBC\r
+ for <notmuch@notmuchmail.org>; Mon, 7 Apr 2014 13:31:56 -0700 (PDT)\r
+X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
+X-Spam-Flag: NO\r
+X-Spam-Score: -2.3\r
+X-Spam-Level: \r
+X-Spam-Status: No, score=-2.3 tagged_above=-999 required=5\r
+ tests=[RCVD_IN_DNSWL_MED=-2.3] autolearn=disabled\r
+Received: from olra.theworths.org ([127.0.0.1])\r
+ by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
+ with ESMTP id YUNm+e8MJSG5 for <notmuch@notmuchmail.org>;\r
+ Mon, 7 Apr 2014 13:31:52 -0700 (PDT)\r
+Received: from outgoing-mail.its.caltech.edu (outgoing-mail.its.caltech.edu\r
+ [131.215.239.19])\r
+ by olra.theworths.org (Postfix) with ESMTP id 36EEC431FC2\r
+ for <notmuch@notmuchmail.org>; Mon, 7 Apr 2014 13:31:51 -0700 (PDT)\r
+Received: from fire-doxen.imss.caltech.edu (localhost [127.0.0.1])\r
+ by fire-doxen-postvirus (Postfix) with ESMTP id BDD672E50DD1;\r
+ Mon, 7 Apr 2014 13:31:50 -0700 (PDT)\r
+X-Spam-Scanned: at Caltech-IMSS on fire-doxen by amavisd-new\r
+Received: from finestructure.net (gwave-217.ligo.caltech.edu\r
+ [131.215.114.217]) (Authenticated sender: jrollins) by fire-doxen-submit\r
+ (Postfix) with ESMTP id AB2672E50E3F; Mon, 7 Apr 2014 13:31:48 -0700 (PDT)\r
+Received: by finestructure.net (Postfix, from userid 1000)\r
+ id 2D4D4600FF; Mon, 7 Apr 2014 13:31:48 -0700 (PDT)\r
+From: Jameson Graef Rollins <jrollins@finestructure.net>\r
+To: Jeremy Nickurak <not-much@trk.nickurak.ca>\r
+Subject: Re: Feature suggestion. Indexing encrypted mail?\r
+In-Reply-To:\r
+ <CA+eQo_3hUAc3uMWw6Hb2JLBATiBDS96GozCa5jqT_1sWz1Y=hQ@mail.gmail.com>\r
+References: <86k3b3ybo6.fsf@someserver.somewhere>\r
+ <878urj1z3j.fsf@maritornes.cs.unb.ca>\r
+ <87txa7pp8z.fsf@servo.finestructure.net>\r
+ <20140406091516.GG26903@vilya.m0g.net>\r
+ <5341D252.90405@fifthhorseman.net>\r
+ <867g71y327.fsf@someserver.somewhere>\r
+ <87ob0dnndk.fsf@servo.finestructure.net>\r
+ <CA+eQo_3hUAc3uMWw6Hb2JLBATiBDS96GozCa5jqT_1sWz1Y=hQ@mail.gmail.com>\r
+User-Agent: Notmuch/0.17+174~gaa1f476 (http://notmuchmail.org) Emacs/24.3.1\r
+ (x86_64-pc-linux-gnu)\r
+Date: Mon, 07 Apr 2014 13:31:45 -0700\r
+Message-ID: <87d2gsop8u.fsf@servo.finestructure.net>\r
+MIME-Version: 1.0\r
+Content-Type: multipart/signed; boundary="=-=-=";\r
+ micalg=pgp-sha256; protocol="application/pgp-signature"\r
+Cc: Notmuch Mailing List <notmuch@notmuchmail.org>,\r
+ Daniel Kahn Gillmor <dkg@fifthhorseman.net>,\r
+ Daniel Kahn Gillmor <dkg@debian.org>\r
+X-BeenThere: notmuch@notmuchmail.org\r
+X-Mailman-Version: 2.1.13\r
+Precedence: list\r
+List-Id: "Use and development of the notmuch mail system."\r
+ <notmuch.notmuchmail.org>\r
+List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
+List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
+List-Post: <mailto:notmuch@notmuchmail.org>\r
+List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
+List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
+ <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
+X-List-Received-Date: Mon, 07 Apr 2014 20:31:56 -0000\r
+\r
+--=-=-=\r
+Content-Type: text/plain\r
+\r
+On Mon, Apr 07 2014, Jeremy Nickurak <not-much@trk.nickurak.ca> wrote:\r
+> Nonetheess, if you can tell from the index that a given message contains\r
+> the words "hotel" "wine" "wife" "secret" and "rendezvous", you can infer a\r
+> *lot* about the contents of encrypted contents of the message.\r
+\r
+Of course. Given that the content of the message will be stored\r
+unencrypted in the db, indexing encrypted messages is potentially a foot\r
+gun. If we were to enable a feature like this, it would definitely be a\r
+user-beware situation. I don't see any way around that.\r
+\r
+jamie.\r
+\r
+--=-=-=\r
+Content-Type: application/pgp-signature\r
+\r
+-----BEGIN PGP SIGNATURE-----\r
+Version: GnuPG v1\r
+\r
+iQIcBAEBCAAGBQJTQwsyAAoJEO00zqvie6q86ywP/i0qNabQugK9HptgO8ZhxaIh\r
+ttyLC7Opi8iiwiP8Glkoa+8xEZ0FJHmK/Q5iK1km971SeGl5cuwYSC+n8dZ5hzi8\r
+MSjFKWlp5R/BL8CkL8QLF1JPJ66aOOsG7LoHENBqWDuJg3MAJAqvet2NYz60F0Gd\r
+9KvfLe5RSiuNHqnEXzI3NRkyc0y5+DD97a+K/2Kjma1YX1phdqdUEoYlBsZ9PQlH\r
+sJh/pzvVO+r7G/F1x/iYji7oMkSh4S8sF4WLED27mq7gFKHHd249YHCKFZVw50/T\r
+GHE60OO/9JUa1kYBcsnCEfJ09Ogy25J960R7/Rh9v4sJMg2CRYFUY7PVBJn0zGgr\r
+ddkm4v5zt6VcOw1nfGRduv+Y69u8haKPSILiMdP9385LDaI/zoUrcSXIbbUo4v0O\r
+PPPYfah0fnl/zsceU7UgzHUBjoIsL+DdZFiHNBJUGsn3jDQsGDUbgaHVUULjj25Y\r
++gzAR0AniCoRVmm8KA6e8bgZyIzj/liYnW3f3g5je+Aen9Ruk0Vcn0CHpBGvn4vZ\r
+yjPyjzxbVUmHnhDFTPOgjhbi23vzEVJ2En29dPtupiC7qF7EFxqarSUvl8V+E7QL\r
+qetY7wXfsQQdEKn7KYE+mYFvIVelw0z+MJ4r7bMoO7ErEzxmRl1g59SAdPs2su1V\r
+vSJ4mqUXy6Kbs0btHwhS\r
+=WQ7K\r
+-----END PGP SIGNATURE-----\r
+--=-=-=--\r