73/171ee7d63d9c22d6d2a3011377a715baeddfc0

   1 Return-Path: <dkg@fifthhorseman.net>\r
   2 X-Original-To: notmuch@notmuchmail.org\r
   3 Delivered-To: notmuch@notmuchmail.org\r
   4 Received: from localhost (localhost [127.0.0.1])\r
   5         by olra.theworths.org (Postfix) with ESMTP id 9B975431FAF\r
   6         for <notmuch@notmuchmail.org>; Wed,  1 Aug 2012 10:20:24 -0700 (PDT)\r
   7 X-Virus-Scanned: Debian amavisd-new at olra.theworths.org\r
   8 X-Spam-Flag: NO\r
   9 X-Spam-Score: 0\r
  10 X-Spam-Level: \r
  11 X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none]\r
  12         autolearn=disabled\r
  13 Received: from olra.theworths.org ([127.0.0.1])\r
  14         by localhost (olra.theworths.org [127.0.0.1]) (amavisd-new, port 10024)\r
  15         with ESMTP id jCorVF2rcV4o for <notmuch@notmuchmail.org>;\r
  16         Wed,  1 Aug 2012 10:20:20 -0700 (PDT)\r
  17 Received: from che.mayfirst.org (che.mayfirst.org [209.234.253.108])\r
  18         by olra.theworths.org (Postfix) with ESMTP id 98CE3431FAE\r
  19         for <notmuch@notmuchmail.org>; Wed,  1 Aug 2012 10:20:20 -0700 (PDT)\r
  20 Received: from [192.168.23.207] (dsl254-070-154.nyc1.dsl.speakeasy.net\r
  21         [216.254.70.154])\r
  22         by che.mayfirst.org (Postfix) with ESMTPSA id D1461F970;\r
  23         Wed,  1 Aug 2012 13:20:15 -0400 (EDT)\r
  24 Message-ID: <50196548.3030504@fifthhorseman.net>\r
  25 Date: Wed, 01 Aug 2012 13:20:08 -0400\r
  26 From: Daniel Kahn Gillmor <dkg@fifthhorseman.net>\r
  27 User-Agent: Mozilla/5.0 (X11; Linux i686;\r
  28         rv:10.0.5) Gecko/20120624 Icedove/10.0.5\r
  29 MIME-Version: 1.0\r
  30 To: Andrei POPESCU <andreimpopescu@gmail.com>\r
  31 Subject: Re: notmuch-mutt: support for duplicate message removal\r
  32 References: <1343808582-9519-1-git-send-email-zack@upsilon.cc>\r
  33         <87pq7aam8n.fsf@nikula.org> <20120801162605.GA6012@sid.nuvreauspam>\r
  34 In-Reply-To: <20120801162605.GA6012@sid.nuvreauspam>\r
  35 X-Enigmail-Version: 1.4.1\r
  36 Content-Type: multipart/signed; micalg=pgp-sha512;\r
  37         protocol="application/pgp-signature";\r
  38         boundary="------------enigAD554EBC86F1DC5F662E73D8"\r
  39 Cc: notmuch@notmuchmail.org, "Kevin J. McCarthy" <kevin@8t8.us>,\r
  40         Stefano Zacchiroli <zack@upsilon.cc>\r
  41 X-BeenThere: notmuch@notmuchmail.org\r
  42 X-Mailman-Version: 2.1.13\r
  43 Precedence: list\r
  44 List-Id: "Use and development of the notmuch mail system."\r
  45         <notmuch.notmuchmail.org>\r
  46 List-Unsubscribe: <http://notmuchmail.org/mailman/options/notmuch>,\r
  47         <mailto:notmuch-request@notmuchmail.org?subject=unsubscribe>\r
  48 List-Archive: <http://notmuchmail.org/pipermail/notmuch>\r
  49 List-Post: <mailto:notmuch@notmuchmail.org>\r
  50 List-Help: <mailto:notmuch-request@notmuchmail.org?subject=help>\r
  51 List-Subscribe: <http://notmuchmail.org/mailman/listinfo/notmuch>,\r
  52         <mailto:notmuch-request@notmuchmail.org?subject=subscribe>\r
  53 X-List-Received-Date: Wed, 01 Aug 2012 17:20:24 -0000\r
  54 \r
  55 This is an OpenPGP/MIME signed message (RFC 2440 and 3156)\r
  56 --------------enigAD554EBC86F1DC5F662E73D8\r
  57 Content-Type: text/plain; charset=UTF-8\r
  58 Content-Transfer-Encoding: quoted-printable\r
  59 \r
  60 On 08/01/2012 12:26 PM, Andrei POPESCU wrote:\r
  61 > I'm at least one user that cares enough about the distinction to have=20\r
  62 > all list mails received via a different address, just to avoid Gmail's =\r
  63 \r
  64 > "feature" of silently dropping my own messages received via a list.=20\r
  65 > IMVHO it should at least be configurable...\r
  66 \r
  67 The proposed feature could also exacerbate the previously-discussed\r
  68 attack vector [0] whereby a malicious Message-ID collision can be used\r
  69 to hide messages from the victim's mailstore.\r
  70 \r
  71         --dkg\r
  72 \r
  73 [0] id:87k42vrqve.fsf@pip.fifthhorseman.net\r
  74 \r
  75 \r
  76 --------------enigAD554EBC86F1DC5F662E73D8\r
  77 Content-Type: application/pgp-signature; name="signature.asc"\r
  78 Content-Description: OpenPGP digital signature\r
  79 Content-Disposition: attachment; filename="signature.asc"\r
  80 \r
  81 -----BEGIN PGP SIGNATURE-----\r
  82 Version: GnuPG v1.4.12 (GNU/Linux)\r
  83 Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/\r
  84 \r
  85 iQJ8BAEBCgBmBQJQGWVIXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w\r
  86 ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQwRUU1QkU5NzkyODJEODBCOUY3NTQwRjFD\r
  87 Q0QyRUQ5NEQyMTczOUU5AAoJEMzS7ZTSFznpHQAP/2W/HIliyQapA+tnJmvLCswq\r
  88 w2Bamfu2ZUvxOHkcI1IkUBmL8GBCiIQH47tj6ishIo1EYrdQ62Fd7bFncy/5IOOk\r
  89 +164Eavte0rHaagIKlyJREi7zuXXiuROh1iNCn+B4N23T1VuaeU9u+eGrxoAfDws\r
  90 y0Ib7diBNuB0eOyiitu1NtmYoijCZFSdzwNKCaJ77tdc66/e+ftO9x2BeQWzHSxI\r
  91 epHh95ISw87w6xKepi4IQ3tYl7YtbKO6k8roFSc39DBuQqIZM0CumG4QWlwX4x8T\r
  92 OTScv7/GKwNApjC2Ak1kZyZ5odV9pf2xAFW6SUEXStsI1yMrTOiJFta+Gyf1VpyO\r
  93 Sbbia9kgFDP03ciU7tcrIDLtkU73MfxErov+HVYZcgy1eJ/4j9P+2/usB/DrT4OD\r
  94 Jdrh5A+/zBv75ePiS10aYcExbzSzfCRh0IQ4g9veM4mjSCWYpKtdWoXKLCWraU05\r
  95 WFwlxEvAnXRVB9ogvvUT5FAgwa24PnOTt7dsU5OKvOuy8fRLByp4C+JQcpsetNKk\r
  96 CSo/D6KVvBsmn1y1iWlXdOvTedR+9RRkk3vuJsl1+CcTF2Uo+o+myG96E6DD8yXz\r
  97 C96fHrcJTL4hgGeUk3nMe+aQ6hhASfwnajIbC4lKRhUlMMIWR5jLMUWy1dS29WXd\r
  98 XWlSgsVzjL7/ylmmRMk4\r
  99 =6et3\r
 100 -----END PGP SIGNATURE-----\r
 101 \r
 102 --------------enigAD554EBC86F1DC5F662E73D8--\r